Release date:
2026-07-09 09:21:21 UTC
Description:
- CVE-2026-41992: out-of-bounds read in the LZH decoder from stale shared
decompression state (left/right) reused across a .Z then .lzh file in a
single gzip -d invocation
Updated packages:
-
gzip-1.3.12-24.el6.tuxcare.els2.x86_64.rpm
sha:df68bfc1f93cbb01ed1bb34d5c87fa6cb28dd20995c853606290ecb96c33124e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
