Red Hat Product Errata RHSA-2026:64787 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:64787 - Security Advisory Overview Updated Packages Synopsis Moderate: xz security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for xz is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es): xz: XZ Utils: Denial of Service via buffer overflow in index decoding (CVE-2026-34743) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2454589 - CVE-2026-34743 xz: XZ Utils: Denial of Service via buffer overflow in index decoding CVEs CVE-2026-34743 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM xz-5.6.2-4.el10_2.1.src.rpm SHA-256: f696a55e92b641af0e174746863cc3c658f8e516b270526fd457959aeccbcbb5 x86_64 xz-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 397ad3bdfe024aafd9f22c821a287c77befe430f32720105ae4b4506dcd10574 xz-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 81e9990f7876a4919f4f6b755e00cbe7eaa5dd435f9d9cb9d44dbe293308bb13 xz-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 81e9990f7876a4919f4f6b755e00cbe7eaa5dd435f9d9cb9d44dbe293308bb13 xz-debugsource-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: a344a740aae6e5e2fe93afa9ac471d92baca91a5333253aa86e0b22f7d0fb8b1 xz-debugsource-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: a344a740aae6e5e2fe93afa9ac471d92baca91a5333253aa86e0b22f7d0fb8b1 xz-devel-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 0afb6e7a69d0d9c5adf352050166c1dc5672ac6e1172b25ece7678a43b273fb0 xz-libs-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 02dc4d009c501fe7c4bd1e2174071fcd08b8d1133697777dce5726b43fee4998 xz-libs-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 35b12839ebed6ff94059f08b26b8411fc9059d19f0a0bf433fc09600b80c16e0 xz-libs-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 35b12839ebed6ff94059f08b26b8411fc9059d19f0a0bf433fc09600b80c16e0 xz-lzma-compat-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 0c98e0d394316d8a19679c1239a840d6fcdf363cc5d2169a694d488cbfa36606 xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 5023a9778c2772a78192156e24626f8d81dcc07a9ccc84e1ab8ab3925b1557ac xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 5023a9778c2772a78192156e24626f8d81dcc07a9ccc84e1ab8ab3925b1557ac Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM xz-5.6.2-4.el10_2.1.src.rpm SHA-256: f696a55e92b641af0e174746863cc3c658f8e516b270526fd457959aeccbcbb5 x86_64 xz-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 397ad3bdfe024aafd9f22c821a287c77befe430f32720105ae4b4506dcd10574 xz-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 81e9990f7876a4919f4f6b755e00cbe7eaa5dd435f9d9cb9d44dbe293308bb13 xz-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 81e9990f7876a4919f4f6b755e00cbe7eaa5dd435f9d9cb9d44dbe293308bb13 xz-debugsource-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: a344a740aae6e5e2fe93afa9ac471d92baca91a5333253aa86e0b22f7d0fb8b1 xz-debugsource-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: a344a740aae6e5e2fe93afa9ac471d92baca91a5333253aa86e0b22f7d0fb8b1 xz-devel-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 0afb6e7a69d0d9c5adf352050166c1dc5672ac6e1172b25ece7678a43b273fb0 xz-libs-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 02dc4d009c501fe7c4bd1e2174071fcd08b8d1133697777dce5726b43fee4998 xz-libs-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 35b12839ebed6ff94059f08b26b8411fc9059d19f0a0bf433fc09600b80c16e0 xz-libs-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 35b12839ebed6ff94059f08b26b8411fc9059d19f0a0bf433fc09600b80c16e0 xz-lzma-compat-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 0c98e0d394316d8a19679c1239a840d6fcdf363cc5d2169a694d488cbfa36606 xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 5023a9778c2772a78192156e24626f8d81dcc07a9ccc84e1ab8ab3925b1557ac xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.x86_64.rpm SHA-256: 5023a9778c2772a78192156e24626f8d81dcc07a9ccc84e1ab8ab3925b1557ac Red Hat Enterprise Linux for IBM z Systems 10 SRPM xz-5.6.2-4.el10_2.1.src.rpm SHA-256: f696a55e92b641af0e174746863cc3c658f8e516b270526fd457959aeccbcbb5 s390x xz-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 82b7cbeb471bc27307187384967cebfa826c189759d015442fa1f749beecbcb8 xz-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 160290bbb250fd765189c201ef09db81dfb3a6d0a11179713b9c5083431c4519 xz-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 160290bbb250fd765189c201ef09db81dfb3a6d0a11179713b9c5083431c4519 xz-debugsource-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 6c3514fb61a50adb11051c7122deb13dbe84afb05e17ce8456c0896ff8db2255 xz-debugsource-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 6c3514fb61a50adb11051c7122deb13dbe84afb05e17ce8456c0896ff8db2255 xz-devel-5.6.2-4.el10_2.1.s390x.rpm SHA-256: b64fc894d1e51c04a6ef3f694d572a060b0cf24b9f2bccc1845e7cbaf7fac31e xz-libs-5.6.2-4.el10_2.1.s390x.rpm SHA-256: eee4ca03076842f9cb688f612a932129074133f077e4cb9065244e9487828ead xz-libs-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: caa1699093f8166d085a572289c5b510439662ce7509c58b01e599a33ce62eb5 xz-libs-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: caa1699093f8166d085a572289c5b510439662ce7509c58b01e599a33ce62eb5 xz-lzma-compat-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 0c558211842353c95b765cf9aba1e84356dbbfba0519abaed56df4290f571919 xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: dc5bcd227b25dea0fbf0d4dfcaa6297bf6fc685e713cfc0f4b1578adb8bcbac7 xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: dc5bcd227b25dea0fbf0d4dfcaa6297bf6fc685e713cfc0f4b1578adb8bcbac7 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM xz-5.6.2-4.el10_2.1.src.rpm SHA-256: f696a55e92b641af0e174746863cc3c658f8e516b270526fd457959aeccbcbb5 s390x xz-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 82b7cbeb471bc27307187384967cebfa826c189759d015442fa1f749beecbcb8 xz-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 160290bbb250fd765189c201ef09db81dfb3a6d0a11179713b9c5083431c4519 xz-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 160290bbb250fd765189c201ef09db81dfb3a6d0a11179713b9c5083431c4519 xz-debugsource-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 6c3514fb61a50adb11051c7122deb13dbe84afb05e17ce8456c0896ff8db2255 xz-debugsource-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 6c3514fb61a50adb11051c7122deb13dbe84afb05e17ce8456c0896ff8db2255 xz-devel-5.6.2-4.el10_2.1.s390x.rpm SHA-256: b64fc894d1e51c04a6ef3f694d572a060b0cf24b9f2bccc1845e7cbaf7fac31e xz-libs-5.6.2-4.el10_2.1.s390x.rpm SHA-256: eee4ca03076842f9cb688f612a932129074133f077e4cb9065244e9487828ead xz-libs-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: caa1699093f8166d085a572289c5b510439662ce7509c58b01e599a33ce62eb5 xz-libs-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: caa1699093f8166d085a572289c5b510439662ce7509c58b01e599a33ce62eb5 xz-lzma-compat-5.6.2-4.el10_2.1.s390x.rpm SHA-256: 0c558211842353c95b765cf9aba1e84356dbbfba0519abaed56df4290f571919 xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: dc5bcd227b25dea0fbf0d4dfcaa6297bf6fc685e713cfc0f4b1578adb8bcbac7 xz-lzma-compat-debuginfo-5.6.2-4.el10_2.1.s390x.rpm SHA-256: dc5bcd227b25dea0fbf0d4dfcaa6297bf6fc685e713cfc0f4b1578adb8bcbac7 Red Hat Enterprise Linux for Power, little endian 10 SRPM xz-5.6.2-4.el10_2.1.src.rpm SHA-256: f696a55e92b641af0e174746863cc3c658f8e516b270526fd457959aeccbcbb5 ppc64le xz-5.6.2-4.el10_2.1.ppc64le.rpm SHA-256: 7bb2b25924ba0f13684b2d9cd12284ee3e0cf8fc578d6c4a40a42a870b7fe9ae xz-debuginfo-5.6.2-4.el10_2.1.ppc64le.rpm SHA-256: c024cd749f03e218775950c9fea08b11b4d382cde690f2eb4b7af2f618e5b072 xz-debuginfo-5.6.2-4.el10_2.1.ppc64le.rpm SHA-256: c024cd749f03e218775950c9fea08b11b4d382cde690f2eb4b7af2f618e5b072 xz-debugsource-5.6.2-4.el10_2.1.ppc64le.rpm SHA-256: 5e2702d53e63c55f6c0b436c40b6da744df140d803ef9e1c15db3742cbf2a29e xz-debugsource-5.6.2-4.el10_2.1.ppc64le.rpm SHA-256: 5e2702d53e63c55f6c0b436c40b6da744df140d803ef9e1c15db3742cbf2a29e xz-devel-5.6.2-4.el10_2.1.ppc64le.rpm SHA-256: 1ae127abf4978ddf3b602144590bfb5c6736b0823b9b04c2c3361141bca14f26 xz-libs-5.6.