Описание
Security update for xz
This update for xz fixes the following issue
- CVE-2026-34743: buffer overflow in lzma_index_append() (bsc#1261280).
Список пакетов
Image SLES12-SP5-Azure-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-SAP-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-SAP-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-Standard-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-ECS-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-SAP-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-SAP-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-SAP-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-SAP-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
SUSE Linux Enterprise Server 12 SP5-LTSS
liblzma5-5.0.5-6.10.1
liblzma5-32bit-5.0.5-6.10.1
xz-5.0.5-6.10.1
xz-devel-5.0.5-6.10.1
xz-lang-5.0.5-6.10.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
liblzma5-5.0.5-6.10.1
liblzma5-32bit-5.0.5-6.10.1
xz-5.0.5-6.10.1
xz-devel-5.0.5-6.10.1
xz-lang-5.0.5-6.10.1
Ссылки
- Link for SUSE-SU-2026:2052-1
- E-Mail link for SUSE-SU-2026:2052-1
- SUSE Security Ratings
- SUSE Bug 1261280
- SUSE CVE CVE-2026-34743 page
Описание
XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:liblzma5-5.0.5-6.10.1
Image SLES12-SP5-Azure-BYOS:xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-BYOS:liblzma5-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-BYOS:xz-5.0.5-6.10.1
Ссылки
- CVE-2026-34743
- SUSE Bug 1261280