[ALSA-2026:89749] Moderate: xz security update
Type:
security
Severity:
moderate
Release date:
2026-10-26
Description:
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): * xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 xz-libs-5.2.5-8.el9_8.1.aarch64.rpm 69ef2ae67de925b7c6faed197e6a99b6af16aadaeaae3292cb77ee159fcc972e
aarch64 xz-5.2.5-8.el9_8.1.aarch64.rpm 7ef5a377a21416962dce1c44ebfe0a0b0b5f26d557dba35702bf8b6bc9af68b2
aarch64 xz-lzma-compat-5.2.5-8.el9_8.1.aarch64.rpm c5d101cef7cab6dd0f3e2fe3cd0fc11a0cb9b8ebf928922782a08ee7b76f48a5
aarch64 xz-devel-5.2.5-8.el9_8.1.aarch64.rpm cd8ae7f12b69039677ea00b26c82cc4d524c51f346c6172bdc62f5995cc5c5cd
i686 xz-libs-5.2.5-8.el9_8.1.i686.rpm 01cb5879d28e2ae55d37948d1f2e909f34a2e96568157e892d71a33bce41db82
i686 xz-devel-5.2.5-8.el9_8.1.i686.rpm 3dfa42073791ec4dfd8e651e479a60fda1f9ff4f01f17357bbe360e5d945dad5
ppc64le xz-devel-5.2.5-8.el9_8.1.ppc64le.rpm 5b40750963f84d95bf52601ed7aaefcb109e4017afd4630b2699aec557f17957
ppc64le xz-lzma-compat-5.2.5-8.el9_8.1.ppc64le.rpm 9ff1e994271e0accbfd432b913667b096a94e1d3e9629ef52f92942bf63329d0
ppc64le xz-5.2.5-8.el9_8.1.ppc64le.rpm cd66c3864e46120f4fff22f87f70ac8fabb5de691e94afc03f06ce77750b3c5d
ppc64le xz-libs-5.2.5-8.el9_8.1.ppc64le.rpm f3088cbe6a9d391b9f0282cc0589b625121f779bd074f828a86cdec002f795fe
s390x xz-lzma-compat-5.2.5-8.el9_8.1.s390x.rpm 0e45e13b9ec7ab8699a04bb319cb8eb07a948f5c23a4121c7e5dd5f346cf3924
s390x xz-5.2.5-8.el9_8.1.s390x.rpm 1bcf625a2a4dfa286df93058cae31bf8dba8161267c66b8a05a456d333b8b7f2
s390x xz-devel-5.2.5-8.el9_8.1.s390x.rpm abe6a44c40056222cd44e7a4f729f971a191ce3e7a21261add21727d165a4dbe
s390x xz-libs-5.2.5-8.el9_8.1.s390x.rpm f5dc4d0747e441ee7cddebce5c7812567dd0ce84698e3d7dc66042bade4467c3
x86_64 xz-libs-5.2.5-8.el9_8.1.x86_64.rpm 5e82e31942b3f00ef8e95ecd2e0811b268eecc7829b215db2b5c4eccb9c98cfb
x86_64 xz-devel-5.2.5-8.el9_8.1.x86_64.rpm aae9c97d10e0d0730909a9d26b263becce787452577b366f35f9da43f4f1911d
x86_64 xz-5.2.5-8.el9_8.1.x86_64.rpm acf5056fb0be7870e7e422fdb2abd5d5407251781f5e33901861f275cb620269
x86_64 xz-lzma-compat-5.2.5-8.el9_8.1.x86_64.rpm bb00700bfb853c12ef6e4cdd051c536151e96c7be8f722bb847adf0fb6fd87c5
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.