[Bug 284887] xz Vulnerability issues

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 18 Feb 2025 18:55:49 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284887

            Bug ID: 284887
           Summary: xz Vulnerability issues
           Product: Base System
           Version: Unspecified
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: doctor@doctor.nl2k.ab.ca

I noticed that the version of xz being used is 5.4.5 and the current version is
5.6.4

CVE-2024-3094  turns up


CVE-2024-3094 Detail as found in

https://nvd.nist.gov/vuln/detail/cve-2024-3094

IS this a cocern for FreeBSD?

-- 
You are receiving this mail because:
You are the assignee for the bug.