https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-4338.htmlhttps://patchthecve.com/cve/CVE-2006-4338.htmlTue, 16 Jun 2026 22:28:53 +0000MEDIUM 5.0: unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.https://patchthecve.com/cve/CVE-2006-4337.htmlhttps://patchthecve.com/cve/CVE-2006-4337.htmlTue, 16 Jun 2026 22:28:53 +0000HIGH 7.5: Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.https://patchthecve.com/cve/CVE-2006-4336.htmlhttps://patchthecve.com/cve/CVE-2006-4336.htmlTue, 16 Jun 2026 22:28:53 +0000HIGH 7.5: Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index.https://patchthecve.com/cve/CVE-2006-4335.htmlhttps://patchthecve.com/cve/CVE-2006-4335.htmlTue, 16 Jun 2026 22:28:52 +0000HIGH 7.5: Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-https://patchthecve.com/cve/CVE-2006-4334.htmlhttps://patchthecve.com/cve/CVE-2006-4334.htmlTue, 16 Jun 2026 22:28:52 +0000MEDIUM 5.0: Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.