Summary
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
* xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | xz | 1:5.6.2-4.el10_2.1 |
| AlmaLinux · 10 | xz-devel | 1:5.6.2-4.el10_2.1 |
| AlmaLinux · 10 | xz-libs | 1:5.6.2-4.el10_2.1 |
| AlmaLinux · 10 | xz-lzma-compat | 1:5.6.2-4.el10_2.1 |
Vulnerabilities 1
-
Low 1.7
XZ Utils: Buffer overflow in lzma_index_append()
XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent l…