Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable xz benchmark. #195

Merged
merged 1 commit into from
Mar 29, 2024
Merged

Disable xz benchmark. #195

merged 1 commit into from
Mar 29, 2024

Conversation

jonathanmetzman
Copy link
Contributor

XZ tarballs were backdoored.

XZ tarballs were backdoored.
@jonathanmetzman jonathanmetzman merged commit 704372b into main Mar 29, 2024
3 checks passed
@jonathanmetzman jonathanmetzman deleted the xz-remove branch March 29, 2024 19:14
@jonathanmetzman
Copy link
Contributor Author

Context: google/oss-fuzz#11760

@vielmetti
Copy link

CVE-2024-3094 is the relevant CVE.

@DonggeLiu
Copy link
Collaborator

Wow, thanks both for fixing this and providing the context!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants