ALSA-2026:89749

Source
https://errata.almalinux.org/9/ALSA-2026-89749.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:89749.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2026:89749
Related
Published
2026-10-26T00:00:00Z
Modified
2026-10-26T20:00:03Z
Summary
Moderate: xz security update
Details

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.

Security Fix(es):

  • xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9 / xz

Package

Name
xz
Purl
pkg:rpm/almalinux/xz

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.5-8.el9_8.1

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:89749.json"

AlmaLinux:9 / xz-devel

Package

Name
xz-devel
Purl
pkg:rpm/almalinux/xz-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.5-8.el9_8.1

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:89749.json"

AlmaLinux:9 / xz-libs

Package

Name
xz-libs
Purl
pkg:rpm/almalinux/xz-libs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.5-8.el9_8.1

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:89749.json"

AlmaLinux:9 / xz-lzma-compat

Package

Name
xz-lzma-compat
Purl
pkg:rpm/almalinux/xz-lzma-compat

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.2.5-8.el9_8.1

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2026:89749.json"