[ALSA-2026:61625] Moderate: gzip security update
Type:
security
Severity:
moderate
Release date:
2026-09-01
Description:
The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fix(es): * gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility (CVE-2026-41991) * gzip: gzip: Information disclosure via global buffer overflow in LZH decompression (CVE-2026-41992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 gzip-1.13-4.el10_2.aarch64.rpm 5606020bf53d11907a658794c18a1a5d6299c64035ea18cce2b0f563ab82a9f3
ppc64le gzip-1.13-4.el10_2.ppc64le.rpm 3b46dd6ca860af42a918ba8379b28ba3605e406ad845245ffc7ea864c11f496c
s390x gzip-1.13-4.el10_2.s390x.rpm 6625cd094819b42e847bd2b65d59d2b598b1ee15ecbc9eb5112d6fb43aeb458d
x86_64 gzip-1.13-4.el10_2.x86_64.rpm fd94635fd0a4c487efe8a1a35c8acc8dd0f7956a420aff9f1fe08b8749cf2c24
x86_64_v2 gzip-1.13-4.el10_2.x86_64_v2.rpm b4d7e20d83319b9cc41e19776f6c6f904ca2a983b36c29b9e9d2d6eab01f2b03
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.