Nixpkgs security tracker

Login with GitHub

Suggestions search

Untriaged
Filter by:
With package: xz

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2026-34743
updated 1 month, 2 weeks ago by @pyrox0 Activity log
  • Created suggestion 1 month, 3 weeks ago
  • @pyrox0 ignored
    22 packages
    • tests.pkg-config.defaultPkgConfigPackages.liblzma
    • home-assistant-custom-components.localtuya
    • tests.prefer-remote-fetch.fetchFromGitHub
    • typstPackages.exzellenz-tum-thesis_0_2_0
    • typstPackages.exzellenz-tum-thesis_0_1_0
    • tests.fetchNextcloudApp.simple-sha512
    • tests.fetchgit.dumb-http-signed-tag
    • typstPackages.exzellenz-tum-thesis
    • tests.fetchPypiLegacy.fetchSimple
    • tests.fetchpatch.fileWithSpace
    • tests.fetchDebianPatch.simple
    • python314Packages.python-xz
    • python313Packages.python-xz
    • python312Packages.python-xz
    • tests.fetchgit.simple-tag
    • python314Packages.txzmq
    • python313Packages.txzmq
    • python312Packages.txzmq
    • plymouth-proxzima-theme
    • matrix-zulip-bridge
    • xzoom
    • xzgv
    1 month, 2 weeks ago
XZ Utils: Buffer overflow in lzma_index_append()

XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.

Affected products

xz
  • ==< 5.8.3

Matching in nixpkgs

pkgs.xz

General-purpose data compression software, successor of LZMA

pkgs.pixz

Parallel compressor/decompressor for xz format

Ignored packages (22)

pkgs.xzgv

Picture viewer for X with a thumbnail-based selector

pkgs.xzoom

X11 screen zoom tool

  • nixos-unstable 0.3
    • nixpkgs-unstable 0.3
    • nixos-unstable-small 0.3
  • nixos-25.11 0.3
    • nixos-25.11-small 0.3
    • nixpkgs-25.11-darwin 0.3