CVE-2024-3094 XZ Vulnerability Report

Hello Customers - We are aware of the reported supply chain compromise in the XZ Utils data compression library which affects versions 5.6.0 and 5.6.1 of the xz-utils package. This vulnerability attempts to introduce the ability for an attacker to remotely execute commands in OpenSSH through the use of the liblzma library within some operating system environments.

xz --version

BlueBotPC has investigated all internal and customer systems. We are happy to report no servers were found to be vulnerable and no data has been compromised.

We have investigated the vulnerability within our platform. BlueBotPC Systems and Customer Systems are safe, protected, and were not exposed to these compromised libraries at any time.

2024

New Discord!

less than 1 minute read

Announcing Official Discord Server

Non-Bot Pledge

less than 1 minute read

Nonbot. Our Commitment to Human-made Content

Back to top ↑

2023

Back to top ↑

2022

Back to top ↑