Updated logo UPDATED Back to feed
breach watch Ubuntu security notices July 06, 2026

USN-8512-1: Gzip vulnerabilities

AI Summary

It was discovered that Gzip's gzexe utility handled temporary files in an insecure manner. When the mktemp utility was not available, gzexe constructed a temporary file path based on the process ID, which could be predicted. A local attacker could possibly use this issue to overwrite arbitrary files via a symlink attack.

0 views
Read full article
Read it on Updated — Tech News. Ahead of the Curve.
Discussion
Sign in to join the discussion.
Loading comments…