CVE-2026-34743 XZ Utils: Buffer overflow in lzma_index_append()