diff --git a/pkgs/os-specific/linux/minimal-bootstrap/xz/default.nix b/pkgs/os-specific/linux/minimal-bootstrap/xz/default.nix
index d1b5ddf62da0..ade7c80ecb74 100644
--- a/pkgs/os-specific/linux/minimal-bootstrap/xz/default.nix
+++ b/pkgs/os-specific/linux/minimal-bootstrap/xz/default.nix
@@ -14,11 +14,14 @@
 }:
 let
   pname = "xz";
-  version = "5.4.3";
+
+  # At least versions 5.6.4 and 5.8.2 crash with spurious OoM when decompressing
+  # certain tarballs, when compiled with tcc.
+  version = "5.4.7";
 
   src = fetchurl {
     url = "https://tukaani.org/xz/xz-${version}.tar.gz";
-    hash = "sha256-HDguC8Lk4K9YOYqQPdYv/35RAXHS3keh6+BtFSjpt+k=";
+    hash = "sha256-jbZmTEjKB5CLkrrtz+fzuiP0nvJHaGRRirXbZyODbnE=";
   };
 in
 bash.runCommand "${pname}-${version}"