Skip to content
OpenAdvisories
Unscored RHSA-2005:357 3 CVEs

Red Hat Security Advisory: gzip security update

Published Sep 17, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as gzip 0:1.3.3-12.rhel3
Red Hat · RHEL 3 enterprise_linux:3::as gzip-debuginfo 0:1.3.3-12.rhel3
Red Hat · RHEL 3 enterprise_linux:3::desktop gzip 0:1.3.3-12.rhel3
Red Hat · RHEL 3 enterprise_linux:3::desktop gzip-debuginfo 0:1.3.3-12.rhel3
Red Hat · RHEL 3 enterprise_linux:3::es gzip 0:1.3.3-12.rhel3
Red Hat · RHEL 3 enterprise_linux:3::es gzip-debuginfo 0:1.3.3-12.rhel3
Red Hat · RHEL 3 enterprise_linux:3::ws gzip 0:1.3.3-12.rhel3
Red Hat · RHEL 3 enterprise_linux:3::ws gzip-debuginfo 0:1.3.3-12.rhel3
Red Hat · RHEL 4 enterprise_linux:4::as gzip 0:1.3.3-15.rhel4
Red Hat · RHEL 4 enterprise_linux:4::as gzip-debuginfo 0:1.3.3-15.rhel4
Red Hat · RHEL 4 enterprise_linux:4::desktop gzip 0:1.3.3-15.rhel4
Red Hat · RHEL 4 enterprise_linux:4::desktop gzip-debuginfo 0:1.3.3-15.rhel4
Red Hat · RHEL 4 enterprise_linux:4::es gzip 0:1.3.3-15.rhel4
Red Hat · RHEL 4 enterprise_linux:4::es gzip-debuginfo 0:1.3.3-15.rhel4
Red Hat · RHEL 4 enterprise_linux:4::ws gzip 0:1.3.3-15.rhel4
Red Hat · RHEL 4 enterprise_linux:4::ws gzip-debuginfo 0:1.3.3-15.rhel4

Vulnerabilities 3

  • Unscored —
    CVE-2005-0758

    zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands…

    gzip bzip2 Debian
  • Unscored —
    CVE-2005-0988

    Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permi…

    gzip Debian
  • Unscored —
    CVE-2005-1228

    Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrar…

    gzip Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=121514
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=155745
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=156266
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_357.json
  • report
    https://access.redhat.com/security/cve/CVE-2005-0758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617573
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0758
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0758
  • report
    https://access.redhat.com/security/cve/CVE-2005-0988
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617595
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0988
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0988
  • report
    https://access.redhat.com/security/cve/CVE-2005-1228
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617616
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-1228
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-1228