Red Hat Security Advisory

RHSA-2026:61625

gzip security update

Released 2026-08-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 10) gzip-1.13-4.el10_2

Fixes 2 records

TI-2026-30386 CVE-2026-41992 · GHSA-qxh4-rprf-2mmj

Global Buffer Overflow in GNU gzip

LOW 31

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.0062 Published 2026-06-29 Partial fix CWE-126

TI-2026-30385 CVE-2026-41991 · GHSA-67v8-88jf-4x6q

Predictable Temporary File in GNU gzip

LOW 10

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling.

CVSS 4.0LOW 2.0 Local No auth User interaction EPSS 0.00117 Published 2026-06-29 Partial fix CWE-377