https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:34:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02406 bdu:2024-02406 https://cve.radiocsirt.org/vuln/bdu:2024-02406 https://cve.radiocsirt.org/vuln/bell-cve-2024-3094 <p><strong>Affected:</strong> Alpaquita:23: xz, BellSoft Hardened Containers:23: xz</p> <p><strong>Affected:</strong> Alpaquita:23: xz, BellSoft Hardened Containers:23: xz</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-3094 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0500 certfr-2024-avi-0500 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0500 https://cve.radiocsirt.org/vuln/cleanstart-2025-nl28578 <p><strong>Affected:</strong> CleanStart: xz</p> <p>Security vulnerability affects the xz package. Malicious code was discovered in the upstream tarballs of xz, starting with version 5.</p> <p><strong>Affected:</strong> CleanStart: xz</p> <p>Security vulnerability affects the xz package. Malicious code was discovered in the upstream tarballs of xz, starting with version 5.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-nl28578 https://cve.radiocsirt.org/vuln/euvd-2026-344020 EUVD-2026-344020 https://cve.radiocsirt.org/vuln/euvd-2026-344020 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3094 <p>Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.</p> <p>Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3094 https://cve.radiocsirt.org/vuln/ghsa-rxwq-x6h5-x525 <p>Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. The tarballs included extra .m4 files, which contained instructions for building with automake that did not exist in the repository. These instructions, through a series of complex obfuscations, extract a prebuilt object file from one of the test archives, which is then used to modify specific functions in the code while building the liblzma package. This issue results in liblzma being used by additional software, like sshd, to provide functionality that will be interpreted by the modified functions.</p> <p>Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. The tarballs included extra .m4 files, which contained instructions for building with automake that did not exist in the repository. These instructions, through a series of complex obfuscations, extract a prebuilt object file from one of the test archives, which is then used to modify specific functions in the code while building the liblzma package. This issue results in liblzma being used by additional software, like sshd, to provide functionality that will be interpreted by the modified functions.</p> https://cve.radiocsirt.org/vuln/ghsa-rxwq-x6h5-x525 https://cve.radiocsirt.org/vuln/gsd-2024-3094 gsd-2024-3094 https://cve.radiocsirt.org/vuln/gsd-2024-3094 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14017-1 <p>liblzma5-32bit-5.6.2-1.1 on GA media</p> <p>liblzma5-32bit-5.6.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14017-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3094 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: xz-utils, Ubuntu:22.04:LTS: xz-utils, Ubuntu:24.04:LTS: xz-utils</p> <p>Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: xz-utils, Ubuntu:22.04:LTS: xz-utils, Ubuntu:24.04:LTS: xz-utils</p> <p>Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3094 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0762 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Debian Linux, SUSE Linux, Arch Linux, Fedora Linux, xz und Gentoo Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Debian Linux, SUSE Linux, Arch Linux, Fedora Linux, xz und Gentoo Linux ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0762