TI-2025-35901 CVE-2025-58058 · GHSA-jc7w-c686-c4v9
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives
Priority MEDIUM 57
xz is a pure golang package for reading and writing xz-compressed files.
Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.8
Released 2026-06-16 · Red Hat rating Important · View on Red Hat →
xz is a pure golang package for reading and writing xz-compressed files.
OpenTelemetry-Go is the Go implementation of OpenTelemetry.