Merge pull request #15 from prydom/CVE-2024-3094

CVE-2024-3094: need to force replace package since it isn't in the upstream image yet
prydom · Mar 29, 2024 · f620b42 · f620b42
2 parents ca47d2d + 5210fa4
commit f620b42
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/config/fedora-kinoite-laptop.yml b/config/fedora-kinoite-laptop.yml
@@ -40,6 +40,11 @@ modules:
       - mv /opt /opt.orig
       - ln -s /usr/lib/opt /opt
 
+  # WORKAROUND FORCE REPLACE XZ for CVE-2024-3094
+  - type: script
+    snippets:
+      - rpm-ostree override replace --experimental --from repo=koji xz xz-libs
+
   # Virtualization
   - type: rpm-ostree
     install: