[ALSA-2026:65998] Moderate: gzip security update
Type:
security
Severity:
moderate
Release date:
2026-09-10
Description:
The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fix(es): * gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility (CVE-2026-41991) * gzip: gzip: Information disclosure via global buffer overflow in LZH decompression (CVE-2026-41992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 gzip-1.9-15.el8_10.aarch64.rpm e0e83861fd6bea1e5e20a6c64d8b3595ab01b52a64c8f17ab3ee13e570399932
ppc64le gzip-1.9-15.el8_10.ppc64le.rpm 9081696f1ebd8f1151d4386192847d18c808d7f005d08f8a2a5b423c4c27ef44
s390x gzip-1.9-15.el8_10.s390x.rpm a5b1bf2a0436fd09e6e66c9edd88d4eae28b5db4e216baad93ad371de57ec357
x86_64 gzip-1.9-15.el8_10.x86_64.rpm 055339d5d9efee8e9719a934db8fe5b44b259772fbf57e0aa05add531d74042a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.