ELSA-2026-89749

ELSA-2026-89749 - xz security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-10-26

Description

[5.2.5-8.1]
- Fix: a buffer overflow in lzma_index_append()
- Add test for the issue above (needs a special build config to actually fail -> does not fail in our environment)
- Resolves: CVE-2026-34743

Related CVEs

CVE-2026-34743

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	xz-5.2.5-8.el9_8.1.src.rpm	7354b9a58022a2e09b028ac61fad1bf0c2f27ef1541cafa8187572dd93950388	-	ol9_aarch64_appstream
	xz-5.2.5-8.el9_8.1.src.rpm	7354b9a58022a2e09b028ac61fad1bf0c2f27ef1541cafa8187572dd93950388	-	ol9_aarch64_baseos_latest
	xz-5.2.5-8.el9_8.1.src.rpm	7354b9a58022a2e09b028ac61fad1bf0c2f27ef1541cafa8187572dd93950388	-	ol9_aarch64_u8_baseos_patch
	xz-5.2.5-8.el9_8.1.aarch64.rpm	3d59d9a622c5ea638c71b9a4c628e90915dcbf66f1050f70a808bb6c2df6f06a	-	ol9_aarch64_baseos_latest
	xz-5.2.5-8.el9_8.1.aarch64.rpm	3d59d9a622c5ea638c71b9a4c628e90915dcbf66f1050f70a808bb6c2df6f06a	-	ol9_aarch64_u8_baseos_patch
	xz-devel-5.2.5-8.el9_8.1.aarch64.rpm	49e061080bd32a75365b2908d05f02417433a0379c057c4d4d4d4a3bcdd9821a	-	ol9_aarch64_appstream
	xz-libs-5.2.5-8.el9_8.1.aarch64.rpm	a94998dafee05f6ce51b96757f842b83c033e2ac7fcb1ea95cedfabf52641f98	-	ol9_aarch64_baseos_latest
	xz-libs-5.2.5-8.el9_8.1.aarch64.rpm	a94998dafee05f6ce51b96757f842b83c033e2ac7fcb1ea95cedfabf52641f98	-	ol9_aarch64_u8_baseos_patch
	xz-lzma-compat-5.2.5-8.el9_8.1.aarch64.rpm	ef783eccdf7cfc8a004ca0f739362f98bfdeff45e51e08aac3fa3a1e7eaede25	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	xz-5.2.5-8.el9_8.1.src.rpm	7354b9a58022a2e09b028ac61fad1bf0c2f27ef1541cafa8187572dd93950388	-	ol9_x86_64_appstream
	xz-5.2.5-8.el9_8.1.src.rpm	7354b9a58022a2e09b028ac61fad1bf0c2f27ef1541cafa8187572dd93950388	-	ol9_x86_64_baseos_latest
	xz-5.2.5-8.el9_8.1.src.rpm	7354b9a58022a2e09b028ac61fad1bf0c2f27ef1541cafa8187572dd93950388	-	ol9_x86_64_u8_baseos_patch
	xz-5.2.5-8.el9_8.1.x86_64.rpm	88eda3a61907d258332e6a35d846ea8095424d041b51c332053506e2750a301b	-	ol9_x86_64_baseos_latest
	xz-5.2.5-8.el9_8.1.x86_64.rpm	88eda3a61907d258332e6a35d846ea8095424d041b51c332053506e2750a301b	-	ol9_x86_64_u8_baseos_patch
	xz-devel-5.2.5-8.el9_8.1.i686.rpm	915af4300a27ef863ff4a6cb7b1c05aec96daee4c90955087d97bc3b2bcb59a0	-	ol9_x86_64_appstream
	xz-devel-5.2.5-8.el9_8.1.x86_64.rpm	938965a44df939608a51b7fb35c711729e0b448d12730fad2db07b3305d480c8	-	ol9_x86_64_appstream
	xz-libs-5.2.5-8.el9_8.1.i686.rpm	ff7e35ebcd9069e47a6cfdf52746c095c3334a1618bbf358465b4c7407a62d8e	-	ol9_x86_64_baseos_latest
	xz-libs-5.2.5-8.el9_8.1.i686.rpm	ff7e35ebcd9069e47a6cfdf52746c095c3334a1618bbf358465b4c7407a62d8e	-	ol9_x86_64_u8_baseos_patch
	xz-libs-5.2.5-8.el9_8.1.x86_64.rpm	427fc89a619637dffa61a4d90e4d25120938f61d556e089c7ee4d332c72a4ce9	-	ol9_x86_64_baseos_latest
	xz-libs-5.2.5-8.el9_8.1.x86_64.rpm	427fc89a619637dffa61a4d90e4d25120938f61d556e089c7ee4d332c72a4ce9	-	ol9_x86_64_u8_baseos_patch
	xz-lzma-compat-5.2.5-8.el9_8.1.x86_64.rpm	10cc97d6549ddd0057a64ef185255c2d42ff41ee8d79a1c5fa23eab757208b0a	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team