xz utils

CISA republished ABB PSIRT advisory SA26P009 on June 30, 2026, warning that CVE-2025-31115 in XZ Utils affects multiple B&R Industrial Automation terminal products worldwide, with fixed Terminal OS releases now available for PPC3100, C50, C80, FT50, MT50, T30, T80, and T50 devices. The flaw is...

CVE-2026-34743 is a buffer overflow in XZ Utils’ lzma_index_append(), a detail that matters because XZ sits deep in the software supply chain and is embedded, directly or indirectly, in far more systems than many administrators realize. Microsoft has now surfaced the issue in its vulnerability...