ELSA-2026-61623-0

ELSA-2026-61623-0 - gzip security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-01

Description

[1.12-2]
- Fix an issue with a temporary file creations when mktemp is missing (41991)
- Fix a global buffer overflow vulnerability in the LZH decompression logic (41992)
Resolves: CVE-2026-41991
Resolves: CVE-2026-41992

Related CVEs

CVE-2026-41991

CVE-2026-41992

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	gzip-1.12-2.el9_8.src.rpm	51b23d7b0c2b8fdf2fa0037fac6aeef053a2b5eaaf5a4ca57782f8f1870d1540	-	ol9_aarch64_baseos_latest
	gzip-1.12-2.el9_8.src.rpm	51b23d7b0c2b8fdf2fa0037fac6aeef053a2b5eaaf5a4ca57782f8f1870d1540	-	ol9_aarch64_u8_baseos_patch
	gzip-1.12-2.el9_8.aarch64.rpm	81873de2a0b49b0bffd9bf8ec1199abe50e07ba616a9f49e01ad1e9be5d14899	-	ol9_aarch64_baseos_latest
	gzip-1.12-2.el9_8.aarch64.rpm	81873de2a0b49b0bffd9bf8ec1199abe50e07ba616a9f49e01ad1e9be5d14899	-	ol9_aarch64_u8_baseos_patch
Oracle Linux 9 (x86_64)	gzip-1.12-2.el9_8.src.rpm	51b23d7b0c2b8fdf2fa0037fac6aeef053a2b5eaaf5a4ca57782f8f1870d1540	-	ol9_x86_64_baseos_latest
	gzip-1.12-2.el9_8.src.rpm	51b23d7b0c2b8fdf2fa0037fac6aeef053a2b5eaaf5a4ca57782f8f1870d1540	-	ol9_x86_64_u8_baseos_patch
	gzip-1.12-2.el9_8.x86_64.rpm	431afde35399943564c595d9b5ac826f200b9bf2ad3593d4dcf920d2fc3075a8	-	ol9_x86_64_baseos_latest
	gzip-1.12-2.el9_8.x86_64.rpm	431afde35399943564c595d9b5ac826f200b9bf2ad3593d4dcf920d2fc3075a8	-	ol9_x86_64_u8_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team