Skip to content
OpenAdvisories
Low RHSA-2026:7647 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Oct 10, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 xz 0:5.8.3-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 xz-devel 0:5.8.3-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 xz-libs 0:5.8.3-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 xz-lzma-compat 0:5.8.3-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 xz-static 0:5.8.3-1.1.hum1

Vulnerabilities 1

  • Low 1.7
    CVE-2026-34743

    XZ Utils: Buffer overflow in lzma_index_append()

    XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent l…

    tukaani-project xz rust xz Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-34743
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7647.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2454589
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-34743
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-34743
  • article
    https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87
  • article
    https://github.com/tukaani-project/xz/releases/tag/v5.8.3
  • article
    https://github.com/tukaani-project/xz/security/advisories/GHSA-x872-m794-cxhv