CVE-2024-3094 on XZ - bacdoor - supply chain backdoor SOLVED on SLACKWARE
Posted: 30 Mar 2024, 13:57
I don't know if this is the best place to address this issue, but a 10.0 critical vulnerability was identified in the xz tarballs of xz package, starting with version 5.6.0. Although the version currently used in porteus is 5.25, I believe it is prudent to apply the suggested corrections.
https://nvd.nist.gov/vuln/detail/CVE-2024-3094
https://access.redhat.com/security/cve/CVE-2024-3094

https://nvd.nist.gov/vuln/detail/CVE-2024-3094
https://access.redhat.com/security/cve/CVE-2024-3094

