root/xz
1
0
Fork 0
mirror of https://git.tukaani.org/xz.git synced 2026-10-31 03:14:56 +00:00
Code Issues Releases Wiki Activity

NEWS: Clarify which bug is CVE-2026-34743

Browse Source 
Fixes: https://salsa.debian.org/debian/xz-utils/-/merge_requests/5#note_775071
This commit is contained in:
Lasse Collin 2026-07-02 21:09:36 +03:00
parent e95cd90da9
commit b8d0707ae7
No known key found for this signature in database
GPG Key ID: 38EE757D69184620
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
NEWS
View File

@ -11,8 +11,8 @@ XZ Utils Release Notes
* liblzma:
- Fix a buffer overflow in lzma_index_append(): If
lzma_index_decoder() was used to decode an Index that
- Fix a buffer overflow in lzma_index_append() (CVE-2026-34743):
If lzma_index_decoder() was used to decode an Index that
contained no Records, the resulting lzma_index was left in
a state where where a subsequent lzma_index_append() would
allocate too little memory, and a buffer overflow would occur.