Advisories » MGASA-2026-0084

Updated xz packages fix security vulnerability

Publication date: 06 Apr 2026
Modification date: 06 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-34743

Description

Buffer overflow in lzma_index_append(). (CVE-2026-34743)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35307
• https://www.openwall.com/lists/oss-security/2026/03/31/13
• https://tukaani.org/xz/index-append-overflow.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34743

SRPMS

9/core

• xz-5.4.3-1.2.mga9