AVG-2851 log
| Package | xz |
| Status | Fixed |
| Severity | Critical |
| Type | authentication bypass |
| Affected | 5.6.0-1 |
| Fixed | 5.6.1-2 |
| Current | 5.6.3-1 [core] |
| Ticket | None |
| Created | Fri Mar 29 17:40:01 2024 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2024-3094 | Critical | Yes | Authentication bypass | Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. The tarballs included extra .m4 files, which contained... |
| Date | Advisory | Package | Type |
|---|---|---|---|
| 29 Mar 2024 | ASA-202403-1 | xz | arbitrary code execution |
| References |
|---|
https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users |