AZL-81800
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81800.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-81800
- Upstream
- Published
- 2026-04-02T19:21:33Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-34743 affecting package xz for versions less than 5.4.4-3
- Details
-
XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder() was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindex_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.
- References