https://seclists.org/oss-sec/2026/q3/1003: Fwd: groff 1.24.2 leased

Q: Which installations should be treated as affected?

The announcement states that the vulnerabilities affect all groff releases dating back to 2012, and potentially earlier. Deployments using older groff releases should therefore be treated as affected.

Q: What version should be used to remediate the issue?

Upgrade to groff 1.24.2, which the announcement says resolves the recently discovered security vulnerabilities.

Q: What should be checked when obtaining the updated source archive?

Verify the cryptographic signature of the groff 1.24.2 source archive before using it. The announcement specifically directs users to the "Obtaining groff" information for signature verification.

Published Sep 29, 2026

Updated

Affected Software

1 affected component

GNU groff<1.24.2

Frequently Asked Questions

Which installations should be treated as affected?

The announcement states that the vulnerabilities affect all groff releases dating back to 2012, and potentially earlier. Deployments using older groff releases should therefore be treated as affected.

What version should be used to remediate the issue?

Upgrade to groff 1.24.2, which the announcement says resolves the recently discovered security vulnerabilities.

What should be checked when obtaining the updated source archive?

Verify the cryptographic signature of the groff 1.24.2 source archive before using it. The announcement specifically directs users to the "Obtaining groff" information for signature verification.