CVE-2024-3094 XZ Vulnerability Report

Hello Customers - We are aware of the reported supply chain compromise in the XZ Utils data compression library which affects versions 5.6.0 and 5.6.1 of the xz-utils package. This vulnerability attempts to introduce the ability for an attacker to remotely execute commands in OpenSSH through the use of the liblzma library within some operating system environments.

xz --version

BlueBotPC has investigated all internal and customer systems. We are happy to report no servers were found to be vulnerable and no data has been compromised.

We have investigated the vulnerability within our platform. BlueBotPC Systems and Customer Systems are safe, protected, and were not exposed to these compromised libraries at any time.