ELSA-2026-65998-0

ELSA-2026-65998-0 - gzip security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-10

Description

[1.9-15]
- Fix the wrong date in the previous changelog message
- There's an updated version of the CVE-2026-41992 fix
Resolves: CVE-2026-41992

[1.9-14]
- Fix an issue with a temporary file creations when mktemp is missing (41991)
- Fix a global buffer overflow vulnerability in the LZH decompression logic (41992)
Resolves: CVE-2026-41991
Resolves: CVE-2026-41992

Related CVEs

CVE-2026-41991

CVE-2026-41992

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	gzip-1.9-15.el8_10.src.rpm	f864aa49314e9efa4e5d1ab5ae2dc47ccd7b258bd340bd891f7f2fe3575482e1	-	ol8_aarch64_baseos_latest
	gzip-1.9-15.el8_10.src.rpm	f864aa49314e9efa4e5d1ab5ae2dc47ccd7b258bd340bd891f7f2fe3575482e1	-	ol8_aarch64_u10_baseos_patch
	gzip-1.9-15.el8_10.aarch64.rpm	9fcf8806ee9f2afd8ebecf3e5e281abdfab2101e7a61697d251694105fc6d970	-	ol8_aarch64_baseos_latest
	gzip-1.9-15.el8_10.aarch64.rpm	9fcf8806ee9f2afd8ebecf3e5e281abdfab2101e7a61697d251694105fc6d970	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	gzip-1.9-15.el8_10.src.rpm	f864aa49314e9efa4e5d1ab5ae2dc47ccd7b258bd340bd891f7f2fe3575482e1	-	ol8_x86_64_baseos_latest
	gzip-1.9-15.el8_10.src.rpm	f864aa49314e9efa4e5d1ab5ae2dc47ccd7b258bd340bd891f7f2fe3575482e1	-	ol8_x86_64_u10_baseos_patch
	gzip-1.9-15.el8_10.x86_64.rpm	deb4aef2226a6479899dee1401b417409519938b33932657abd0c86faa3a96c5	-	ol8_x86_64_baseos_latest
	gzip-1.9-15.el8_10.x86_64.rpm	deb4aef2226a6479899dee1401b417409519938b33932657abd0c86faa3a96c5	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team