2024-3094 没有 xz-utils 这个 keyword 。 所以 fzf grep 不到

[edwinjhlee]

3094 没有 xz-utils 这个 keyword 。 所以 fzf 的 grep 不到。

cve (main ✘) » x cve          
cve:      CVE-2024-3094
year:     2024
no:       3094
vp:       /;Red Hat/Red Hat Enterprise Linux 10;Red Hat/Red Hat Enterprise Linux 6;Red Hat/Red Hat Enterprise Linux 7;Red Hat/Red Hat Enterprise Linux 8;Red Hat/Red Hat Enterprise Linux 9;Red Hat/Red Hat JBoss Enterprise Application Platform 8
ghsa:     GHSA-RXWQ-X6H5-X525
score:    10
cwe:      506
desc:     Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.