Security update (CVE-2024-3094) - April 10, 2024

On March 30, 2024, the US Cyber Defense Agency echoed a new critical backdoor vulnerability in a linux common package (XZ-utils library): CVE-2024-3094.

What could be the affect?

Under certain conditions, this backdoor could allow a malicious actor to break authentication, allowing the attacker to gain access to the affected system

What did we do since the announcement?

We scanned all our Linux instances, in order to check whether we are vulnerable and take the recommended actions to minimize the risk

Current status

After completing the scanning and take the relevant actions, all our systems are secured and not vulnerable.

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request