diff --git a/sysutils/superfile/files/patch-vendor_github.com_ulikunitz_xz_lzma_reader.go b/sysutils/superfile/files/patch-vendor_github.com_ulikunitz_xz_lzma_reader.go
new file mode 100644
index 000000000000..6f67010c2e95
--- /dev/null
+++ b/sysutils/superfile/files/patch-vendor_github.com_ulikunitz_xz_lzma_reader.go
@@ -0,0 +1,13 @@
+https://github.com/ulikunitz/xz/commit/235be8df4f86c943c154112d1abb3c951c86babb
+
+--- vendor/github.com/ulikunitz/xz/lzma/reader.go.orig	2026-01-15 17:03:26 UTC
++++ vendor/github.com/ulikunitz/xz/lzma/reader.go
+@@ -30,7 +30,7 @@ func (c *ReaderConfig) fill() {
+ 	if c.DictCap == 0 {
+ 		// set an upper limit of 2 GB for dictionary capacity to address
+ 		// the zero prefix security issue.
+-		c.DictCap = 1 << 31
++		c.DictCap = 1 << 31 - 1
+ 		// original: c.DictCap = 8 * 1024 * 1024
+ 	}
+ }