USN-8733-2: Gzip vulnerabilities
Ubuntu patches Gzip vulnerabilities (CVE-2026-41991) in USN-8733-2 for LTS versions, addressing insecure temp files and incorrect handling of compressed files.
Ubuntu has issued a security notice, USN-8733-2, to address vulnerabilities in the Gzip package for Ubuntu 14.04, 18.04, and 20.04 LTS versions. The update includes fixes for an insecure temporary file creation vulnerability (CVE-2026-41991) that could allow local attackers to overwrite arbitrary files, and other issues that could lead to information disclosure or denial of service. This advisory provides the corresponding fix for the original USN-8733-1 notice.
- Ubuntu has released a security notice (USN-8733-2) to patch Gzip vulnerabilities on Ubuntu 14.04 LTS, 18.04 LTS, and 20.04 LTS.
- The vulnerabilities include insecure temporary file creation in gzexe (CVE-2026-41991) and incorrect handling of compressed files.
- The flaws could lead to local file overwriting, information disclosure, or denial of service.
- This is a follow-up advisory to an initial fix in USN-8733-1.
- CVEs
- CVE-2026-41991
- Products
- Gzip
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-41991 | GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling | 2.0 | <1% |
From the original article
USN-8733-1 fixed vulnerabilities in Gzip. This update provides the corresponding fix for Gzip on Ubuntu 14. 04 LTS, Ubuntu 18.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.