CVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs

This is currently at the head of the queue, but since xz causes a stdenv rebuild on all four supported platforms, we are talking about a 220,000 packages in the queue that need to be built.

10 Likes