AZL-81908
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81908.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-81908
- Upstream
- Published
- 2026-04-02T19:21:33Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2026-34743 affecting package rust for versions less than 1.90.0-7
- Details
-
XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder() was used to decode an Index that contained no Records, the resulting lzmaindex was left in a state where where a subsequent lzmaindex_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.
- References