AlmaLinux 9.2 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat / xz-static (ALMALINUX9.2:CLSA-2026:1779894244)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779894244 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used t...

AlmaLinux 9.6 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat / xz-static (ALMALINUX9.6:CLSA-2026:1780518704)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780518704 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used t...

Rocky Linux 9.6 [TuxCare] Security Update: xz / xz-devel / xz-libs / xz-lzma-compat / xz-static (ALMALINUX9.6:CLSA-2026:1780518704)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780518704 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used...

EulerOS Virtualization 2.11.1 : xz (EulerOS-SA-2026-3482)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...

EulerOS Virtualization 2.11.0 : xz (EulerOS-SA-2026-3570)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...

xz: XZ Utils: Denial of Service via buffer overflow in index decoding

A flaw was found in XZ Utils. When the lzmaindexdecoder function processes an empty index, and a subsequent lzmaindexappend operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service DoS for affected systems...

AZL-81800 CVE-2026-34743 affecting package xz for versions less than 5.4.4-3

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...

CVE-2026-34743: Heap-based Buffer Overflow

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindexappend would allocate too little...