xz-utils vulnerabilities (Debian)

4 vulnerabilities.

• xz-utils Debian XZ Utils: Buffer overflow in lzma_index_append() CVE-2026-34743 Fix available 1.7 LowApril 2, 2026
• xz-utils Debian XZ has a heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 Fix available 8.7 HighApril 3, 2025
• xz-utils Debian Xz: malicious code in distributed source CVE-2024-3094 Public exploitFix available EPSS 90.9% 10.0 CriticalMarch 29, 2024
• xz-utils Debian An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is... CVE-2022-1271 Fix available 8.8 HighApril 7, 2022