Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:20813-1

Опубликовано: 26 мая 2026
Источник: suse-cvrf

Описание

Security update for xz

This update for xz fixes the following issue

  • CVE-2026-34743: buffer overflow in lzma_index_append() (bsc#1261280).

Список пакетов

openSUSE Leap 16.0
liblzma5-5.8.1-160000.3.1
liblzma5-x86-64-v3-5.8.1-160000.3.1
xz-5.8.1-160000.3.1
xz-devel-5.8.1-160000.3.1
xz-lang-5.8.1-160000.3.1

Ссылки

Описание

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.

Затронутые продукты
openSUSE Leap 16.0:liblzma5-5.8.1-160000.3.1
openSUSE Leap 16.0:liblzma5-x86-64-v3-5.8.1-160000.3.1
openSUSE Leap 16.0:xz-5.8.1-160000.3.1
openSUSE Leap 16.0:xz-devel-5.8.1-160000.3.1
Ссылки