Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Feb 2025 18:55:49 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 284887] xz Vulnerability issues
Message-ID:  <bug-284887-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D284887

            Bug ID: 284887
           Summary: xz Vulnerability issues
           Product: Base System
           Version: Unspecified
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: doctor@doctor.nl2k.ab.ca

I noticed that the version of xz being used is 5.4.5 and the current versio=
n is
5.6.4

CVE-2024-3094  turns up


CVE-2024-3094 Detail as found in

https://nvd.nist.gov/vuln/detail/cve-2024-3094

IS this a cocern for FreeBSD?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-284887-227>