Ubuntu 16.04 Gzip Important Info Disclosure Denial of Service USN-8733

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

Several security issues were fixed in Gzip. Software Description: - gzip: GNU compression utilities Details: Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporary files in an insecure manner when mktemp was unavailable. A local attacker could possibly use this issue to overwrite arbitrary files. (CVE-2026-41991) Elias Hasas, Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip incorrectly handled certain compressed files. An attacker could possibly use this issue to obtain sensitive information or cause Gzip to crash, resulting in a denial of service. (CVE-2026-41992)

Several security issues were fixed in Gzip.

Software Description:

- gzip: GNU compression utilities

Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe

utility created temporary files in an insecure manner when mktemp was

unavailable. A local attacker could possibly use this issue to overwrite

arbitrary files. (CVE-2026-41991)

Elias Hasas, Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip incorrectly

handled certain compressed files. An attacker could possibly use this

issue to obtain sensitive information or cause Gzip to crash, resulting

in a denial of service. (CVE-2026-41992)

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS gzip 1.6-4ubuntu1+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2026-41991, CVE-2026-41992

Ubuntu Security Notice USN-8733-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases