# Security Advisory CVE-2024-3094 xz-utils

[Blog](/blog/)&gt;[News](/blog/)&gt;Security Advisory CVE-2024-3094 xz-utils 

Security Advisory CVE-2024-3094 xz-utils
========================================

April 22, 2024 | By [ Instaclustr ](https://www.instaclustr.com/blog/author/instaclustr/)

 

 

 

 



   [ ](https://x.com/intent/tweet?text=Security%20Advisory%20CVE-2024-3094%20xz-utils&url=https://www.instaclustr.com/blog/security-advisory-cve-2024-3094-xz-utils/) [ ](https://www.linkedin.com/shareArticle?mini=true&url=https://www.instaclustr.com/blog/security-advisory-cve-2024-3094-xz-utils/&title=&summary=Security%20Advisory%20CVE-2024-3094%20xz-utils&source=) 

The Instaclustr Security team has evaluated a critical vulnerability impacting versions 5.6.0 and 5.6.1 of XZ tools and libraries. These versions of the software may allow unauthorized access to affected systems. More detail can be found via this link: [CVE-2024-3094](https://nvd.nist.gov/vuln/detail/CVE-2024-3094).

Instaclustr has analyzed and searched our fleet and found no vulnerable versions of xz-utils present. Customers with self-managed clusters should investigate whether any of the operating systems hosting clusters are vulnerable.

If you have any queries regarding this vulnerability and how it relates to Instaclustr services, please contact security@instaclustr.com

 

 [ Add Instaclustr as a preferred source on Google ](https://google.com/preferences/source?q=instaclustr.com)



 

 ![mail icon]()#### Get the latest articles for open sourceIn your inbox

 <a class="btn btn-primary btn-popup text-dark" href="">Sign up now</a> 

 

 

 

  ### Related content

 [ Zero Downtime Migration to Instaclustr 

 

 Yes, we can migrate existing Cassandra clusters to Instaclustr without any downtime. Here's what to expect from the process... 

 

 

 

 

 

 

 ](https://www.instaclustr.com/blog/zero-downtime-migration-to-instaclustr/) 

 [ Workflow Comparison: Uber Cadence vs Netflix Conductor 

 

 When choosing what’s right for your company’s opensource workflow needs it is important to know the difference and similarities ... 

 

 

 

 

 

 

 ](https://www.instaclustr.com/blog/workflow-comparison-uber-cadence-vs-netflix-conductor/) 

 [ Will Your Cassandra Database Project Succeed?: The New Stack 

 

 Open source Apache Cassandra® continues to stand out as an enterprise-proven solution for organizations seeking high availability... 

 

 

 

 

 

 

 ](https://www.instaclustr.com/blog/will-your-cassandra-database-project-succeed-the-new-stack/) 

 

  <a class="close-modal" href="">×</a>Sign upto ourNewsletter
-----------------------
