Back Linuxsecurity

Oracle Linux 10 gzip Important Buffer Overflow Vuln ELSA-2026-61625

Linuxsecurity •LinuxSecurity Advisories • September 3, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

[1.13-4] - Fix an issue with a temporary file creations when mktemp is missing (41991) - Fix a global buffer overflow vulnerability in the LZH decompression logic (41992) Resolves: CVE-2026-41991 Resolves: CVE-2026-41992

gzip-1.13-4.el10_2.x86_64.rpm

gzip-1.13-4.el10_2.aarch64.rpm

Related CVEs: CVE-2026-41991 CVE-2026-41992

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Oracle Linux Security Updates Address Critical Vulnerabilities Oracle has released multiple security updates for its Linux distributions, addressing several critical vulnerabilities. Key updates include patches for CVE-2026-59090 and CVE-2026-18301 in GIMP, and multiple CVEs in FreeRDP, libssh, and Grafana. Affected systems include Oracle Linux 8, 9, and 10, with vulnerabilities allowing for potential remote code execution and privilege escalation. The updates also resolve issues related to file handling and email verification in Grafana. Administrators are urged to apply these patches promptly to mitigate risks. The updates were published on September 3, 2026, and are part of ongoing efforts to maintain system security. Specific CVEs include CVE-2026-55194, CVE-2026-67288, and CVE-2026-18300, among others. 65 sources 46

Extracted Entities

Oracle Linux 10 gzip Important Buffer Overflow Vuln ELSA-2026-61625

The full story

Extracted Entities

CVEs (2)

CWE Weaknesses (2)

Platforms (2)