Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2052-1

Опубликовано: 25 мая 2026
Источник: suse-cvrf

Описание

Security update for xz

This update for xz fixes the following issue

  • CVE-2026-34743: buffer overflow in lzma_index_append() (bsc#1261280).

Список пакетов

Image SLES12-SP5-Azure-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-SAP-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-SAP-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-Standard-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-ECS-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-SAP-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-EC2-SAP-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-SAP-BYOS
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
Image SLES12-SP5-GCE-SAP-On-Demand
liblzma5-5.0.5-6.10.1
xz-5.0.5-6.10.1
SUSE Linux Enterprise Server 12 SP5-LTSS
liblzma5-5.0.5-6.10.1
liblzma5-32bit-5.0.5-6.10.1
xz-5.0.5-6.10.1
xz-devel-5.0.5-6.10.1
xz-lang-5.0.5-6.10.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
liblzma5-5.0.5-6.10.1
liblzma5-32bit-5.0.5-6.10.1
xz-5.0.5-6.10.1
xz-devel-5.0.5-6.10.1
xz-lang-5.0.5-6.10.1

Описание

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.


Затронутые продукты
Image SLES12-SP5-Azure-BYOS:liblzma5-5.0.5-6.10.1
Image SLES12-SP5-Azure-BYOS:xz-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-BYOS:liblzma5-5.0.5-6.10.1
Image SLES12-SP5-Azure-HPC-BYOS:xz-5.0.5-6.10.1

Ссылки