RLSA-2026:89749
RLSA-2026:89749 · Moderate: xz security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS 5.3 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
xz Rocky Linux:9
- Affected ranges
- ECOSYSTEM: < 0:5.2.5-8.el9_8.1
Update to 0:5.2.5-8.el9_8.1