Source: xz-utils
Version: 5.8.2-2
Severity: important
Tags: security upstream
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Control: found -1 5.8.1-1
Control: found -1 5.4.1-1

Hi,

The following vulnerability was published for xz-utils.

CVE-2026-34743[0]:
| liblzma: Fix a buffer overflow in lzma_index_append()


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-34743
    https://www.cve.org/CVERecord?id=CVE-2026-34743
[1] https://tukaani.org/xz/index-append-overflow.html
[2] 
https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87

Regards,
Salvatore

Reply via email to