Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/gzip@1.3.5-10sarge2
purl pkg:deb/debian/gzip@1.3.5-10sarge2
Next non-vulnerable version 1.10-4+deb11u1
Latest non-vulnerable version 1.10-4+deb11u1
Risk 4.0
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-1yf3-td2x-xffn
Aliases:
CVE-2009-2624
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2011. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information.
1.3.12-9+squeeze1
Affected by 1 other vulnerability.
VCID-3adf-qttu-3kfd
Aliases:
CVE-2022-1271
A vulnerability has been discovered in GNU Gzip and XZ Utils' grep helpers which could result in writes to arbitrary files.
1.9-3+deb10u1
Affected by 1 other vulnerability.
1.10-4+deb11u1
Affected by 0 other vulnerabilities.
VCID-73ee-qa4t-gqd7
Aliases:
CVE-2006-4334
gzip is affected by multiple vulnerabilities, including buffer overflows and infinite loops, possibly allowing the execution of arbitrary code.
1.3.5-15
Affected by 3 other vulnerabilities.
VCID-ensg-v8ut-4kh9
Aliases:
CVE-2006-4337
gzip is affected by multiple vulnerabilities, including buffer overflows and infinite loops, possibly allowing the execution of arbitrary code.
1.3.5-15
Affected by 3 other vulnerabilities.
VCID-px24-9c2r-73cn
Aliases:
CVE-2006-4338
gzip is affected by multiple vulnerabilities, including buffer overflows and infinite loops, possibly allowing the execution of arbitrary code.
1.3.5-15
Affected by 3 other vulnerabilities.
VCID-vm8g-v83d-mbfm
Aliases:
CVE-2010-0001
This GLSA contains notification of vulnerabilities found in several Gentoo packages which have been fixed prior to January 1, 2011. The worst of these vulnerabilities could lead to local privilege escalation and remote code execution. Please see the package list and CVE identifiers below for more information.
1.3.12-9+squeeze1
Affected by 1 other vulnerability.
VCID-z31n-qyzz-rfhy
Aliases:
CVE-2006-4336
gzip is affected by multiple vulnerabilities, including buffer overflows and infinite loops, possibly allowing the execution of arbitrary code.
1.3.5-15
Affected by 3 other vulnerabilities.
VCID-z6cd-db4j-2uey
Aliases:
CVE-2006-4335
gzip is affected by multiple vulnerabilities, including buffer overflows and infinite loops, possibly allowing the execution of arbitrary code.
1.3.5-15
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-1q5k-8ctf-hff7 gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. CVE-1999-1332
VCID-ggpy-kzh6-dkbh security flaw CVE-2005-1228
VCID-hn43-p68p-g3d7 The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367. CVE-2004-0970
VCID-uf6e-fsw6-bbbv security flaw CVE-2005-0758
VCID-vj3y-4hqq-xybm security flaw CVE-2005-0988
VCID-w9ut-ky8t-sqar gzip: symlink attack on temporary files leads to arbitrary file overwrite CVE-2003-0367

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T01:05:22.484354+00:00 Debian Oval Importer Fixing VCID-ggpy-kzh6-dkbh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T01:00:00.434392+00:00 Debian Oval Importer Affected by VCID-px24-9c2r-73cn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:45:27.027293+00:00 Debian Oval Importer Fixing VCID-uf6e-fsw6-bbbv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:53:25.745422+00:00 Debian Oval Importer Affected by VCID-3adf-qttu-3kfd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:53:02.306709+00:00 Debian Oval Importer Fixing VCID-hn43-p68p-g3d7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:33:18.613754+00:00 Debian Oval Importer Affected by VCID-z31n-qyzz-rfhy https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:11:25.683204+00:00 Debian Oval Importer Affected by VCID-z6cd-db4j-2uey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:39:38.670106+00:00 Debian Oval Importer Fixing VCID-vj3y-4hqq-xybm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:01:47.180014+00:00 Debian Oval Importer Fixing VCID-1q5k-8ctf-hff7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:01:19.595732+00:00 Debian Oval Importer Affected by VCID-ensg-v8ut-4kh9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:32:24.698579+00:00 Debian Oval Importer Affected by VCID-1yf3-td2x-xffn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:00:55.014192+00:00 Debian Oval Importer Fixing VCID-w9ut-ky8t-sqar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:35:34.004012+00:00 Debian Oval Importer Affected by VCID-73ee-qa4t-gqd7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:13:47.845449+00:00 Debian Oval Importer Affected by VCID-vm8g-v83d-mbfm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T14:52:40.987326+00:00 Debian Oval Importer Affected by VCID-3adf-qttu-3kfd https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-12T00:37:23.869502+00:00 Debian Oval Importer Fixing VCID-ggpy-kzh6-dkbh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-12T00:32:13.589191+00:00 Debian Oval Importer Affected by VCID-px24-9c2r-73cn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-12T00:18:04.262609+00:00 Debian Oval Importer Fixing VCID-uf6e-fsw6-bbbv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:27:46.187200+00:00 Debian Oval Importer Affected by VCID-3adf-qttu-3kfd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:27:23.362014+00:00 Debian Oval Importer Fixing VCID-hn43-p68p-g3d7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:08:24.652809+00:00 Debian Oval Importer Affected by VCID-z31n-qyzz-rfhy https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:49:11.612988+00:00 Debian Oval Importer Affected by VCID-z6cd-db4j-2uey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:18:29.182470+00:00 Debian Oval Importer Fixing VCID-vj3y-4hqq-xybm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:42:00.424233+00:00 Debian Oval Importer Fixing VCID-1q5k-8ctf-hff7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:41:35.947386+00:00 Debian Oval Importer Affected by VCID-ensg-v8ut-4kh9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:13:43.609628+00:00 Debian Oval Importer Affected by VCID-1yf3-td2x-xffn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:42:48.345465+00:00 Debian Oval Importer Fixing VCID-w9ut-ky8t-sqar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:21:50.607034+00:00 Debian Oval Importer Affected by VCID-73ee-qa4t-gqd7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:00:23.137116+00:00 Debian Oval Importer Affected by VCID-vm8g-v83d-mbfm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:40:56.268783+00:00 Debian Oval Importer Affected by VCID-3adf-qttu-3kfd https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-09T00:07:25.061167+00:00 Debian Oval Importer Fixing VCID-ggpy-kzh6-dkbh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-09T00:02:31.722972+00:00 Debian Oval Importer Affected by VCID-px24-9c2r-73cn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:48:56.943980+00:00 Debian Oval Importer Fixing VCID-uf6e-fsw6-bbbv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:00:46.602650+00:00 Debian Oval Importer Affected by VCID-3adf-qttu-3kfd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:00:24.663213+00:00 Debian Oval Importer Fixing VCID-hn43-p68p-g3d7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:42:05.666307+00:00 Debian Oval Importer Affected by VCID-z31n-qyzz-rfhy https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:26:48.842251+00:00 Debian Oval Importer Affected by VCID-z6cd-db4j-2uey https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:57:15.217008+00:00 Debian Oval Importer Fixing VCID-vj3y-4hqq-xybm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:21:59.009687+00:00 Debian Oval Importer Fixing VCID-1q5k-8ctf-hff7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:21:33.145381+00:00 Debian Oval Importer Affected by VCID-ensg-v8ut-4kh9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:54:51.552458+00:00 Debian Oval Importer Affected by VCID-1yf3-td2x-xffn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:25:40.183404+00:00 Debian Oval Importer Fixing VCID-w9ut-ky8t-sqar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:10:12.151597+00:00 Debian Oval Importer Affected by VCID-73ee-qa4t-gqd7 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:49:52.100038+00:00 Debian Oval Importer Affected by VCID-vm8g-v83d-mbfm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T23:13:56.743608+00:00 Debian Oval Importer Affected by VCID-3adf-qttu-3kfd https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0