Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/gzip@0?distro=trixie
purl pkg:deb/debian/gzip@0?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-ja6m-7d3c-k3cc gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files. CVE-2004-1349
VCID-xpf8-3pr7-dyew gzip contain a bug potentially allowing an attacker to execute arbitrary commands. CVE-2004-0603

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:38:26.401000+00:00 Debian Importer Fixing VCID-xpf8-3pr7-dyew https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:26:47.253239+00:00 Debian Importer Fixing VCID-ja6m-7d3c-k3cc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:39:41.511554+00:00 Debian Importer Fixing VCID-xpf8-3pr7-dyew https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:02:49.339712+00:00 Debian Importer Fixing VCID-ja6m-7d3c-k3cc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:26:23.289549+00:00 Debian Importer Fixing VCID-ja6m-7d3c-k3cc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:26:23.212851+00:00 Debian Importer Fixing VCID-xpf8-3pr7-dyew https://security-tracker.debian.org/tracker/data/json 38.1.0