CVE-2024-3094: Malicious code in xz 5.6.0 and 5.6.1 tarballs

Announcements Security
53

Guix has grafts precisely for this purpose.

Can’t we have something similar? What roadblock as would there be for implementing and then utilizing such change?

6 Likes