Merge pull request #18 from prydom/CVE-2024-3094

[CVE-2024-3094] base image has downgraded XZ
prydom · Mar 30, 2024 · 12cba71 · 12cba71
2 parents f6edf4d + b60f8ba
commit 12cba71
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 6 deletions.
diff --git a/config/fedora-kinoite-laptop.yml b/config/fedora-kinoite-laptop.yml
@@ -40,11 +40,6 @@ modules:
       - mv /opt /opt.orig
       - ln -s /usr/lib/opt /opt
 
-  # WORKAROUND FORCE REPLACE XZ for CVE-2024-3094
-  - type: script
-    snippets:
-      - rpm-ostree override replace --experimental --from repo=koji xz xz-libs
-
   # Virtualization
   - type: rpm-ostree
     install:

diff --git a/config/files/etc/yum.repos.d/koji.repo b/config/files/etc/yum.repos.d/koji.repo
@@ -1,7 +1,7 @@
 [koji]
 name=Koji $basearch
 baseurl=https://kojipkgs.fedoraproject.org/repos/rawhide/latest/$basearch/
-enabled=1
+enabled=0
 gpgcheck=0
 repo_gpgcheck=0
 # DISABLE KOJI WHEN NOT BROKEN - xz compromised CVE-2024-3094