byinarie / CVE-2024-3094-info

Information for CVE-2024-3094
51 stars 10 forks source link

Do not execute 'xz' #2

Open tgharold opened 6 months ago

tgharold commented 6 months ago

xz_version=$(xz --version | head -n1 | awk '{print $4}')

It's not wise to make a call to 'xz' here, even though you think you ruled out it being "safe" up above. Use your distribution's package manager to find out the installed version.