Medium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.
Patch available
Distribution package intelligence
Ubuntu vendor package status
Canonical’s release and source-package findings are shown separately from local repository availability.
1 package state
Repository candidate not checked
A published vendor fix does not prove that a matching update is enabled and installable on a particular asset. Confirm the local package candidate before scheduling remediation.
Ubuntu release
Source package
Vendor state
Fixed version
Evidence
Ubuntu 24.04 LTSnoble · standard archive
gzip
Vendor fix publishedCanonical reports that a fixed source package version has been published. Repository candidate availability is not checked by BlackTree.
Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.
1 current
CVE-2026-41992 · CSAF 2.0 · revision 3 · finalRed Hat Product Securitygzip: gzip: Information disclosure via global buffer overflow in LZH decompression
6 known affected
The vendor explicitly identifies these products as affected by this CVE.
gzip.src as a component of Red Hat Enterprise Linux 6
gzip as a component of Red Hat Enterprise Linux 7
gzip.src as a component of Red Hat Enterprise Linux 7
openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4
openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4
devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces
Summary
A flaw was found in GNU gzip. This global buffer overflow vulnerability in the LZH decompression logic is caused by improper reuse of shared global state between different decompression formats. An attacker can exploit this by providing a specially crafted LZW file followed by a specially crafted LZH file to the `gzip -d` command. This can lead to an out-of-bounds read, potentially resulting in information disclosure.
Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
Optional official sources
National CERT insights ?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.
Select the national-authority views to include. The exact source language is shown on each matched advisory. Your choice is remembered on this device and encoded in the shareable URL.
Official European source
ENISA European Vulnerability Database
Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.
1 current
ENISA EUVD identifier
EUVD-2026-40069
No EUVD known-exploited evidence
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.
By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.
This issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.
EUVD state
Present in the current official mapping
Known exploitation
Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score
6.9 · CVSS 4.0
Advisory evidence
No linked advisory details stored yet
Recommended actionScheduled
Medium technical severity with no CISA KEV confirmation; remediate through the normal risk-based patch cycle unless local exposure raises the priority.
Patch available
01
What, why and how
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.
By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.
This issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.
What
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.
By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.
This issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.
Why
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
How
An attacker operating through local access may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.
What
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.
By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.
This issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.
Why
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
How
An attacker operating through local access may attempt exploitation without authentication or user interaction. If successful, the issue may cause the confidentiality, integrity or availability impact described by the vendor.
02
Exploit reality and attack path
CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.
Observed exploitation ?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.No confirmed evidence
No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.
Public PoC / exploit material ?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.None recorded
No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.
Likely attack path
local access → Buffer Over-read → cause the confidentiality, integrity or availability impact described by the vendor
Attack surface
Local
Privileges required
None: unauthenticated exploitation is possible
User interaction
None
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Not a CVSS 4.0 base metric
Weakness ?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-126: Buffer Over-read. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
CVSS vector ?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
Common Vulnerability Scoring System 4.0: the compact vector below is decoded into plain language.
AVLocalAttack vector: The attacker needs local access to the vulnerable system.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.ATNoneAttack requirements: No additional deployment or execution condition is required.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.VCHighVulnerable-system confidentiality: A successful attack can cause a major loss.VINoneVulnerable-system integrity: No direct loss is represented by this metric.VANoneVulnerable-system availability: No direct loss is represented by this metric.SCNoneSubsequent-system confidentiality: No direct loss is represented by this metric.SINoneSubsequent-system integrity: No direct loss is represented by this metric.SANoneSubsequent-system availability: No direct loss is represented by this metric.
Post-exploitation / living off the land
The issue can support a local privilege or sandbox boundary transition; normal system utilities may then be available in the gained context.
UnauthenticatedCWE-126
A
Official authority intelligence
Only matched European and national findings are included. Language selectors and unavailable sources are omitted.
ENISA EUVD · EUVD-2026-40069Official EUVD mapping
GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.
By decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.
This issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.
Ein lokaler Angreifer kann mehrere Schwachstellen in gzip ausnutzen, um Dateien zu manipulieren und um vertrauliche Informationen offenzulegen.
Official advisory ↗Cyber Security Agency of Singapore · English · CSA-SB-20260701Security Bulletin 1 July 2026
The Cyber Security Agency of Singapore included this CVE in its official Security Bulletin 1 July 2026, published on 1 July 2026. Open the linked bulletin for the product, severity and reference information published in that issue.
Official advisory ↗JVN iPedia · Japanese · JVNDB-2026-021833GNU ProjectのGNU gzipにおけるバッファオーバーリードの脆弱性
GNU gzipには、単一の実行内で異なる解凍形式間で共有されるグローバル状態が不適切に再利用されることで発生する、LZH解凍ロジックにおけるグローバルバッファオーバーフローの脆弱性があります。GNU gzipはLZ77、LZW、およびLZHの解凍ルーチン間で共有されるグローバル配列を保持しており、同一呼び出し内で処理されるファイル間で再初期化されません。特別に細工されたLZWファイルを解凍し、その後に特別に細工されたLZHファイルを1回のgzip -dコマンドで処理することにより、攻撃者は共有グローバル状態を汚染し、その結果LZHデコーダ内で範囲外読み取りを誘発する可能性があります。LZH解凍ロジックは共有配列に残った古い値を参照し、割り当てられたグローバルバッファの終端を超えた読み取りを引き起こします。この問題はコミット63dbf6b3b9e6e781df1a6a64e609b10e23969681で修正されました。
Official advisory ↗CERT Polska · Polish · CVE-2026-41991CERT Polska
w social mediach
CERT Polska otrzymał zgłoszenie o podatnościach w oprogramowaniu GNU gzip i koordynował proces ujawniania informacji.
Podatność CVE-2026-41991 : GNU gzip niepoprawnie obsługuje pliki tymczasowe w funkcjonalności gzexe . Gdy narzędzie mktemp nie jest dostępne w ścieżce użytkownika (PATH), gzexe korzysta z konstruowania ścieżki pliku tymczasowego opartej jedynie na identyfikatorze procesu (PID). Ta przewidywalna nazwa pliku jest tworzona bez sprawdzania uprawnień do pliku ani czy plik już istnieje.
Lokalny atakujący może przewidzieć nazwę i utworzyć link symboliczny wskazujący na dowolny plik zapisywalny przez ofiarę. gzexe po uruchomieniu, śledzi link symboliczny i nadpisuje plik docelowy.
Problem ten został naprawiony w commitcie 4e6f8b24ab823146ab8776f0b7fe486ab34d4269.
Podatność CVE-2026-41992 : GNU gzip zawiera podatność typu global buffer overflow w procesie dekompresji plików LZH , wynikającą z nieprawidłowego ponownego wykorzystania współdzielonego stanu globalnego pomiędzy różnymi formatami dekompresji w ramach jednego uruchomienia. GNU gzip utrzymuje globalną tablicę, która jest współdzielona między przebiegami dekompresji LZ77 , LZW i LZH , i nie jest ponownie inicjalizowana między plikami przetwarzanymi w tym samym wywołaniu. Przez dekompresję spreparowanego pliku LZW , a następnie spreparowanego pliku LZH w jednym poleceniu gzip -d , atakujący może zatruć współdzielony stan globalny i następnie spowodować odczyt poza zakresem w dekoderze LZH .
Problem ten został naprawiony w commitach 63dbf6b3b9e6e781df1a6a64e609b10e23969681 i e7378c2d421be6a286922374425680bbe9ad8b7d.
Operational remediation based on structured source evidence.
Status ?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
Affected versionsThe structured affected or fixed version information changed.
Before
gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); and 14 more
After
gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); and 19 more
Affected versionsThe structured affected or fixed version information changed.
Before
gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; gzip as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Enterprise Linux 8; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); registry.redhat.io/discovery/discovery-server-rhel9@sha256:5efae8059c9c15454abac947b8482412686d60aaf5c104557d463e8282e340af_amd64 as a component of Red Hat Discovery 2; registry.redhat.io/discovery/discovery-server-rhel9@sha256:e9592a7aa5db3a61a7248d7b0305f3eb2fae189b1d078e483f1cc439f5b2351d_arm64 as a component of Red Hat Discovery 2; gzip-main@aarch64 as a component of Red Hat Hardened Images; gzip-main@src as a component of Red Hat Hardened Images; and 1 more
After
gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debuginfo-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-debugsource-0:1.9-15.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8); gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); and 14 more
Affected versionsThe structured affected or fixed version information changed.
Before
gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; gzip as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Hardened Images; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); registry.redhat.io/discovery/discovery-server-rhel9@sha256:5efae8059c9c15454abac947b8482412686d60aaf5c104557d463e8282e340af_amd64 as a component of Red Hat Discovery 2; registry.redhat.io/discovery/discovery-server-rhel9@sha256:e9592a7aa5db3a61a7248d7b0305f3eb2fae189b1d078e483f1cc439f5b2351d_arm64 as a component of Red Hat Discovery 2
After
gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; gzip as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Enterprise Linux 8; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); registry.redhat.io/discovery/discovery-server-rhel9@sha256:5efae8059c9c15454abac947b8482412686d60aaf5c104557d463e8282e340af_amd64 as a component of Red Hat Discovery 2; registry.redhat.io/discovery/discovery-server-rhel9@sha256:e9592a7aa5db3a61a7248d7b0305f3eb2fae189b1d078e483f1cc439f5b2351d_arm64 as a component of Red Hat Discovery 2; gzip-main@aarch64 as a component of Red Hat Hardened Images; gzip-main@src as a component of Red Hat Hardened Images; and 1 more
Affected versionsThe structured affected or fixed version information changed.
Before
gzip.src as a component of Red Hat Enterprise Linux 10; gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; gzip as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Hardened Images; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
After
gzip.src as a component of Red Hat Enterprise Linux 6; gzip as a component of Red Hat Enterprise Linux 7; gzip.src as a component of Red Hat Enterprise Linux 7; gzip as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Enterprise Linux 8; gzip.src as a component of Red Hat Hardened Images; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4; devspaces/code-sshd-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: gzip-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debuginfo-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-debugsource-0:1.13-4.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10); gzip-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debuginfo-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9); gzip-debugsource-0:1.12-2.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9); registry.redhat.io/discovery/discovery-server-rhel9@sha256:5efae8059c9c15454abac947b8482412686d60aaf5c104557d463e8282e340af_amd64 as a component of Red Hat Discovery 2; registry.redhat.io/discovery/discovery-server-rhel9@sha256:e9592a7aa5db3a61a7248d7b0305f3eb2fae189b1d078e483f1cc439f5b2351d_arm64 as a component of Red Hat Discovery 2
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.
CVE-2026-41992: Global Buffer Overflow in GNU gzip | BlackTree
