Bug 2272210 (CVE-2024-3094) - CVE-2024-3094 xz: malicious code in distributed source
Summary: CVE-2024-3094 xz: malicious code in distributed source
Keywords:
Status: NEW
Alias: CVE-2024-3094
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
urgent
urgent
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2272206
TreeView+ depends on / blocked
 
Reported: 2024-03-29 15:56 UTC by Zack Miele
Modified: 2024-04-17 06:56 UTC (History)
51 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Zack Miele 2024-03-29 15:56:47 UTC 
Malicious code discovered in the tarballs distributed from upstream sources beginning in 5.6.0.
Note You need to log in before you can comment on or make changes to this bug.