CVE-2024-3094 found in texlive2024.iso

[Johan Wilenius]

Hello!

Our threat intelligence detected an exploit in the texlive-file. The XZ-utility is reported to be outdated and is prone to the CVE-2024-3094. Could the live iso be updated so we can continue to use it? 😊

Kind regards,
Johan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://tug.org/pipermail/tex-live/attachments/20250228/11de2ff0/attachment.htm>