CVE-2024-3094

NVD - CVE-2024-3094

有人在 XZ Utils 裡面塞了後門(時間大概是從今年2月的 5.6.0 開始), 於是下游有用到的 sshd 就大爆死了, 不管是 Red Hat, Fedora, Kali, OpenSUSE, Debian 全部無一倖免...

Linux 使用者建議換回 5.4.6 再檢查一下有沒有被種什麼奇怪的東西...

FreeBSD 14.0 Release-p6

FreeBSD-SA-24:03.unbound
FreeBSD-EN-24:05.tty
FreeBSD-EN-24:06.wireguard
FreeBSD-EN-24:07.clang
FreeBSD-EN-24:08.kerberos

FreeBSD 13.3 Release

FreeBSD 13.3-RELEASE Release Notes | The FreeBSD Project

FreeBSD 14.0 Release-p5

FreeBSD-SA-24:01.bhyveload
FreeBSD-SA-24:02.tty
FreeBSD-EN-24:01.tzdata
FreeBSD-EN-24:02.libutil
FreeBSD-EN-24:03.kqueue
FreeBSD-EN-24:04.ip

FreeBSD 14.0 Release-p4

FreeBSD-SA-23:19.openssh