QID 504564

QID 504564: Alpine Linux Security Update for xz

Alpine Linux has released a security update for xz to fix the vulnerabilities.

Affected versions:
Alpine Linux 3.17
Alpine Linux 3.18
Alpine Linux 3.19


Affected Package versions prior to 5.2.5-r1.

Successful exploitation of this vulnerability could lead to a security breach or could affect integrity, availability, and confidentiality.

  • CVSS V3 rated as Critical - 8.8 severity.
  • CVSS V2 rated as Medium - 5.4 severity.
  • Solution
    Refer to Alpine Linux advisory xz for updates and patch information.
    Vendor References

    CVEs related to QID 504564

    Software Advisories
    Advisory ID Software Component Link
    xz-5.2.5-r1 Alpine Linux URL Logo security.alpinelinux.org/srcpkg/xz