ELSA-2026-64787-0

ELSA-2026-64787-0 - xz security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-08

Description

[1:5.6.2-4.1]
- Fix: a buffer overflow in lzma_index_append()
- Add test for the issue above (needs a special build config to actually fail -> does not fail in our environemnt)
- Resolves: CVE-2026-34743

Related CVEs

CVE-2026-34743

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	xz-5.6.2-4.el10_2.1.src.rpm	51edb303e9dc56e64a2b1c4e834d6e6dd12cdd6649f8bf66c52c3c7a9e76883e	-	ol10_aarch64_appstream
	xz-5.6.2-4.el10_2.1.src.rpm	51edb303e9dc56e64a2b1c4e834d6e6dd12cdd6649f8bf66c52c3c7a9e76883e	-	ol10_aarch64_baseos_latest
	xz-5.6.2-4.el10_2.1.src.rpm	51edb303e9dc56e64a2b1c4e834d6e6dd12cdd6649f8bf66c52c3c7a9e76883e	-	ol10_aarch64_u2_baseos_patch
	xz-5.6.2-4.el10_2.1.aarch64.rpm	ae747ba54a7a2f9e50025b95955ffc7e1f305adeb41d48cf36a45490f43a4a4e	-	ol10_aarch64_baseos_latest
	xz-5.6.2-4.el10_2.1.aarch64.rpm	ae747ba54a7a2f9e50025b95955ffc7e1f305adeb41d48cf36a45490f43a4a4e	-	ol10_aarch64_u2_baseos_patch
	xz-devel-5.6.2-4.el10_2.1.aarch64.rpm	f9c041de213ace4181ac839a9e71a20aa26efd2b27592a66db3d4e5519f10b22	-	ol10_aarch64_appstream
	xz-libs-5.6.2-4.el10_2.1.aarch64.rpm	a14731052ff487396e652657bca6b849af5e414c00e2d82a4ce808768599eb0a	-	ol10_aarch64_baseos_latest
	xz-libs-5.6.2-4.el10_2.1.aarch64.rpm	a14731052ff487396e652657bca6b849af5e414c00e2d82a4ce808768599eb0a	-	ol10_aarch64_u2_baseos_patch
	xz-lzma-compat-5.6.2-4.el10_2.1.aarch64.rpm	d25095c9e635925717b0b3fc0d1829a8db3ffcf0026f7b780db3b3b2ec1412cc	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	xz-5.6.2-4.el10_2.1.src.rpm	51edb303e9dc56e64a2b1c4e834d6e6dd12cdd6649f8bf66c52c3c7a9e76883e	-	ol10_x86_64_appstream
	xz-5.6.2-4.el10_2.1.src.rpm	51edb303e9dc56e64a2b1c4e834d6e6dd12cdd6649f8bf66c52c3c7a9e76883e	-	ol10_x86_64_baseos_latest
	xz-5.6.2-4.el10_2.1.src.rpm	51edb303e9dc56e64a2b1c4e834d6e6dd12cdd6649f8bf66c52c3c7a9e76883e	-	ol10_x86_64_u2_baseos_patch
	xz-5.6.2-4.el10_2.1.x86_64.rpm	d685dc82a6e2e9d977352da47916dcfaf16880b901c3a33b92a55a152f0d551a	-	ol10_x86_64_baseos_latest
	xz-5.6.2-4.el10_2.1.x86_64.rpm	d685dc82a6e2e9d977352da47916dcfaf16880b901c3a33b92a55a152f0d551a	-	ol10_x86_64_u2_baseos_patch
	xz-devel-5.6.2-4.el10_2.1.x86_64.rpm	f28c232b9b76a9e931a3b170f152a937253e3ce0387d0c1efd13196044be7912	-	ol10_x86_64_appstream
	xz-libs-5.6.2-4.el10_2.1.x86_64.rpm	91b8ec06a0a38c2bac7f3a680c7c500efb6fa21de7f755daa9cde5faf76976d9	-	ol10_x86_64_baseos_latest
	xz-libs-5.6.2-4.el10_2.1.x86_64.rpm	91b8ec06a0a38c2bac7f3a680c7c500efb6fa21de7f755daa9cde5faf76976d9	-	ol10_x86_64_u2_baseos_patch
	xz-lzma-compat-5.6.2-4.el10_2.1.x86_64.rpm	ee6ae01028b0494c6fb6bef36da280d06d0fc27111aaa2eaf35a5c7601dd1f5d	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team