4 ms·

If you installed xz on macOS using brew, then you have xz (XZ Utils) 5.6.1 liblzma 5.6.1 which are within the release target for the vuln. As elsewhere in

• neodypsis 3y ago
  It's been reverted now: https://github.com/Homebrew/homebrew-core/blob/9a0603b474804ef76cef17cf1bc90397996088bb/Formula/x/xz.rb https://github.com/Homebrew/homebrew-core/blob/9a0603b474804...
  • keepamovin 3y ago
    Yeah it was when I posted the comment too. That's why you could type brew upgrade xz and it went back to 5.4.6 I guess? But it might have been around that time, cutting it fine, not out for everybody. I don't know. Comment race condition haha! :)
• pjl 3y ago
  Similarly if you're using MacPorts, make sure to sync and upgrade xz if you have it installed. 5.6.1 was available for a few days and just rolled back ~20 minutes ago: https://github.com/macports/macports-ports/commit/a1388aee09c9e921e3a9d47cf9d37e5d3f3c10ad https://github.com/macports/macports-ports/commit/a1388aee09...
• quinncom 3y ago
  Thank you for this tip. `brew upgrade xz` worked. I was going to uninstall but it's used by so many things… brew uninstall xz Error: Refusing to uninstall /opt/homebrew/Cellar/xz/5.6.1 because it is required by aom, composer, curl, ffmpeg, gcc, gd, ghostscript, glib, google-cloud-sdk, grc, harfbuzz, httpie, img2pdf, jbig2enc, jpeg-xl, leptonica, libarchive, libavif, libheif, libraw, libtiff, libzip, little-cms2, numpy, ocrmypdf, openblas, openjpeg, openvino, php, pillow, pipx, pngquant, poppler, python@3.11, python@3.12, rsync, tesseract, tesseract-lang, unpaper, webp, wp-cli, yt-dlp and zstd, which are currently installed.
  • keepamovin 3y ago
    You're welcome!