CVE-2024-3094

Date Time Description
12 April 2024 12:18 UTC Using vulnerability and threat analysis provided from multiple publicly available sources, including the NIST NVD, CISA, and MITRE, as well as our private partners, Pexip has completed our evaluation of the risk to our products, services, and environments related to the XZ Utils backdoor vulnerability, CVE-2024-3094. We have determined that, in accordance with the published information about this vulnerability, no Pexip product or service is affected by this CVE. Please contact your Pexip representative or support@pexip.com for further details.
4 April 2024 11:34 UTC Pexip is continuing to evaluate the impact on products and environments related to the XZ Utils backdoor vulnerability, CVE-2024-3094. Based on the information presently known, no Pexip product or service is affected by this CVE. We will continue to provide relevant updates in due course if this information changes.
2 April 2024 5:29 UTC Pexip is aware of the XZ Utils backdoor vulnerability, CVE-2024-3094, and is actively investigating whether its products and services are affected. We have not identified any issues to date and will provide relevant updates in due course.
24 April 2024 13:00 UTC Pexip considers the event completed.