VYPR

apk package

chainguard/xz

pkg:apk/chainguard/xz

Vulnerabilities (1)

  • CVE-2024-3094Mar 29, 2024
    affected < 0fixed 0

    Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify sp