<feed xmlns='http://www.w3.org/2005/Atom'>
<title>packages/utils/gzip/patches, branch master</title>
<subtitle>Mirror of packages feed</subtitle>
<id>https://git.openwrt.org/feed/packages/atom?h=master</id>
<link rel='self' href='https://git.openwrt.org/feed/packages/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/'/>
<updated>2026-10-28T06:11:40Z</updated>
<entry>
<title>gzip: update to version 1.15</title>
<updated>2026-10-28T06:11:40Z</updated>
<author>
<name>Josef Schlehofer</name>
</author>
<published>2026-10-26T12:09:14Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/feed/packages/commit/?id=5a6e8d37ae606e77bbff9040c379f03b534da422'/>
<id>urn:sha1:5a6e8d37ae606e77bbff9040c379f03b534da422</id>
<content type='text'>
This fixes a buffer overflow when decompressing an .lzh file after a .Z
file and a use of uninitialized memory on some malformed inputs.

Fixes: CVE-2026-41992

CVE-2026-41991 is in gzexe, which this package does not install.

Backport the upstream fix for the build on aarch64 with musl, where the
head macro from gzip.h breaks a struct member in &lt;signal.h&gt;.

Signed-off-by: Josef Schlehofer &lt;pepe.schlehofer@gmail.com&gt;
</content>
</entry>
</feed>
