[ALSA-2026:64787] Moderate: xz security update
Type:
security
Severity:
moderate
Release date:
2026-09-09
Description:
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 xz-5.6.2-4.el10_2.1.aarch64.rpm 50e2d5e40610767308a0f2ed6ae446d81e72264ba7866dd637c3b8d22f070272
aarch64 xz-lzma-compat-5.6.2-4.el10_2.1.aarch64.rpm 6f4a1b4fad201e4e93f3b8b3b379957dd95902b736bf4426b2dc871385d613f5
aarch64 xz-devel-5.6.2-4.el10_2.1.aarch64.rpm 882198396cc1979261b25f5bd332549b44d2bdbe9c969d4e998d7ca31a3cb9b2
aarch64 xz-libs-5.6.2-4.el10_2.1.aarch64.rpm bd12ebafe1715a3ad2a46e9c04bad743a5488d22fb5877504a376dedfd61f3f3
ppc64le xz-libs-5.6.2-4.el10_2.1.ppc64le.rpm 26482d35fc9b6c3a65cd39d6e158e81278a0a75f8a9503c6984006bcca13940c
ppc64le xz-lzma-compat-5.6.2-4.el10_2.1.ppc64le.rpm 7212de490969c53333a82c3ac46e8cd0746840860d2563b8b1408dd2c580820b
ppc64le xz-5.6.2-4.el10_2.1.ppc64le.rpm a86354d16d3631564537898b829020730e02b7beabff2c1f04ae8d469d66d6ba
ppc64le xz-devel-5.6.2-4.el10_2.1.ppc64le.rpm aa19aaefa77777060106b09236aec425d8374a995e5573954884e09c94983658
s390x xz-libs-5.6.2-4.el10_2.1.s390x.rpm 41bd10e113f26f9c27b9a4e76f87f416f8cfbc639cefb6c713bee7d3f034e75d
s390x xz-devel-5.6.2-4.el10_2.1.s390x.rpm 597197152263c1269fd038d4c2aa4d733b52eaa2fb5df36c1f41160d516fb43d
s390x xz-5.6.2-4.el10_2.1.s390x.rpm 6aa247610bb5dffa66ab06102436e5b444e2274efe41e4676afaa2b8ca34b6d5
s390x xz-lzma-compat-5.6.2-4.el10_2.1.s390x.rpm 75ecbf00a0ad9e195f26abd237a6b212016cf59d4cbc86ff877555fc506f9c69
x86_64 xz-libs-5.6.2-4.el10_2.1.x86_64.rpm 0ec039a113bfee9532393f3e410c6986916e7b849419ce0f57c4e7e7f4f7be0d
x86_64 xz-devel-5.6.2-4.el10_2.1.x86_64.rpm 783c86a645dce0b7878ce7afbf2e29f79cd8146d61152accbc90bc02f3d35d57
x86_64 xz-5.6.2-4.el10_2.1.x86_64.rpm 8861ccb7d83dc60eb9999c0bd82f4839fcc4f3e0dc8a736ee86d8cf1fc838ac7
x86_64 xz-lzma-compat-5.6.2-4.el10_2.1.x86_64.rpm dfc2b56d7baf07beff0978c3148bcf777b40f2d4a6c0133dfd6b97384878bd38
x86_64_v2 xz-libs-5.6.2-4.el10_2.1.x86_64_v2.rpm 3de2ba5004b33f4a9fb550ae9f3c92a226103c7ace19966f9fd29f3f4722af58
x86_64_v2 xz-lzma-compat-5.6.2-4.el10_2.1.x86_64_v2.rpm 4caeb0d2379b857a1b0b4d8e062a387ade2393d8344bb75b269c43664fe81093
x86_64_v2 xz-devel-5.6.2-4.el10_2.1.x86_64_v2.rpm 6d344df0b7b2d1fa9d30daad3f7d808689bddcbba366778e6dbbc6c1c2223902
x86_64_v2 xz-5.6.2-4.el10_2.1.x86_64_v2.rpm ffaa855f68ff23c4723d929a9ed9ee3f456315dd56e38f7083dc0063dd5839ea
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.