https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:20:46 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:64787 <p><strong>Affected:</strong> AlmaLinux:10: xz, AlmaLinux:10: xz-devel, AlmaLinux:10: xz-libs, AlmaLinux:10: xz-lzma-compat</p> <p>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.</p> <p>Security Fix(es):</p> <p>* xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: xz, AlmaLinux:10: xz-devel, AlmaLinux:10: xz-libs, AlmaLinux:10: xz-lzma-compat</p> <p>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.</p> <p>Security Fix(es):</p> <p>* xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:64787 https://cve.radiocsirt.org/vuln/bdu:2026-05834 bdu:2026-05834 https://cve.radiocsirt.org/vuln/bdu:2026-05834 https://cve.radiocsirt.org/vuln/bell-cve-2026-34743 <p><strong>Affected:</strong> Alpaquita:23: xz, Alpaquita:25: xz, Alpaquita:stream: xz, BellSoft Hardened Containers:23: xz, BellSoft Hardened Containers:25: xz, BellSoft Hardened Containers:stream: xz</p> <p><strong>Affected:</strong> Alpaquita:23: xz, Alpaquita:25: xz, Alpaquita:stream: xz, BellSoft Hardened Containers:23: xz, BellSoft Hardened Containers:25: xz, BellSoft Hardened Containers:stream: xz</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-34743 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0420 certfr-2026-avi-0420 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0420 https://cve.radiocsirt.org/vuln/cleanstart-2026-bx73994 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: prometheus-redis-exporter-fips</p> <p>Package prometheus-redis-exporter-fips version 1.78.0-r5 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: prometheus-redis-exporter-fips</p> <p>Package prometheus-redis-exporter-fips version 1.78.0-r5 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-bx73994 https://cve.radiocsirt.org/vuln/euvd-2026-339277 EUVD-2026-339277 https://cve.radiocsirt.org/vuln/euvd-2026-339277 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34743 <p>XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.</p> <p>XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34743 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34743 msrc_CVE-2026-34743 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34743 https://cve.radiocsirt.org/vuln/oesa-2026-1853 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: xz, openEuler:22.03-LTS-SP4: xz, openEuler:24.03-LTS: xz, openEuler:24.03-LTS-SP1: xz, openEuler:24.03-LTS-SP2: xz, openEuler:24.03-LTS-SP3: xz</p> <p>XZ Utils is free general-purpose data compression software with a high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils. Security Fix(es):</p> <p>XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.(CVE-2026-34743)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: xz, openEuler:22.03-LTS-SP4: xz, openEuler:24.03-LTS: xz, openEuler:24.03-LTS-SP1: xz, openEuler:24.03-LTS-SP2: xz, openEuler:24.03-LTS-SP3: xz</p> <p>XZ Utils is free general-purpose data compression software with a high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils. Security Fix(es):</p> <p>XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.(CVE-2026-34743)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1853 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10492-1 <p>liblzma5-32bit-5.8.3-1.1 on GA media</p> <p>liblzma5-32bit-5.8.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10492-1 https://cve.radiocsirt.org/vuln/rhsa-2026:7647 <p>xz: XZ Utils: Denial of Service via buffer overflow in index decoding</p> <p>xz: XZ Utils: Denial of Service via buffer overflow in index decoding</p> https://cve.radiocsirt.org/vuln/rhsa-2026:7647 https://cve.radiocsirt.org/vuln/rlsa-2026:64787 <p><strong>Affected:</strong> Rocky Linux:10: xz</p> <p>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.</p> <p>Security Fix(es):</p> <p>* xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: xz</p> <p>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.</p> <p>Security Fix(es):</p> <p>* xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:64787 https://cve.radiocsirt.org/vuln/suse-su-2026:2052-1 <p>Security update for xz</p> <p>Security update for xz</p> https://cve.radiocsirt.org/vuln/suse-su-2026:2052-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34743 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xz-utils, Ubuntu:Pro:16.04:LTS: xz-utils, Ubuntu:Pro:18.04:LTS: xz-utils, Ubuntu:Pro:20.04:LTS: xz-utils, Ubuntu:22.04:LTS: xz-utils, Ubuntu:24.04:LTS: xz-utils, Ubuntu:25.10: xz-utils</p> <p>XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: xz-utils, Ubuntu:Pro:16.04:LTS: xz-utils, Ubuntu:Pro:18.04:LTS: xz-utils, Ubuntu:Pro:20.04:LTS: xz-utils, Ubuntu:22.04:LTS: xz-utils, Ubuntu:24.04:LTS: xz-utils, Ubuntu:25.10: xz-utils</p> <p>XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34743 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0942 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in xz ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in xz ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0942