ELSA-2026-61625-0

ELSA-2026-61625-0 - gzip security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-01

Description

[1.13-4]
- Fix an issue with a temporary file creations when mktemp is missing (41991)
- Fix a global buffer overflow vulnerability in the LZH decompression logic (41992)
Resolves: CVE-2026-41991
Resolves: CVE-2026-41992

Related CVEs

CVE-2026-41991

CVE-2026-41992

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	gzip-1.13-4.el10_2.src.rpm	5e21d7b907b59fdb7965e825e486f06d2ad85b62144ca33e2be4bbefefb45847	-	ol10_aarch64_baseos_latest
	gzip-1.13-4.el10_2.src.rpm	5e21d7b907b59fdb7965e825e486f06d2ad85b62144ca33e2be4bbefefb45847	-	ol10_aarch64_u2_baseos_patch
	gzip-1.13-4.el10_2.aarch64.rpm	45d76e519098c0fd44a3a6b9158e002fb97fd67f3fbfcbad946b13eb51bb622b	-	ol10_aarch64_baseos_latest
	gzip-1.13-4.el10_2.aarch64.rpm	45d76e519098c0fd44a3a6b9158e002fb97fd67f3fbfcbad946b13eb51bb622b	-	ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64)	gzip-1.13-4.el10_2.src.rpm	5e21d7b907b59fdb7965e825e486f06d2ad85b62144ca33e2be4bbefefb45847	-	ol10_x86_64_baseos_latest
	gzip-1.13-4.el10_2.src.rpm	5e21d7b907b59fdb7965e825e486f06d2ad85b62144ca33e2be4bbefefb45847	-	ol10_x86_64_u2_baseos_patch
	gzip-1.13-4.el10_2.x86_64.rpm	65c83736f86154b08e3acd828e894d0e30eb266fee7d2673cb004930cd5392d7	-	ol10_x86_64_baseos_latest
	gzip-1.13-4.el10_2.x86_64.rpm	65c83736f86154b08e3acd828e894d0e30eb266fee7d2673cb004930cd5392d7	-	ol10_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team