xz-devel vulnerabilities (AlmaLinux)

3 vulnerabilities.

• xz-devel AlmaLinux XZ Utils: Buffer overflow in lzma_index_append() CVE-2026-34743 Fix available 1.7 LowApril 2, 2026
• xz-devel AlmaLinux XZ has a heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 Fix available 8.7 HighApril 3, 2025
• xz-devel AlmaLinux An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is... CVE-2022-1271 Fix available 8.8 HighApril 7, 2022