# Investigation completed for CVE-2024-3094

**URL:** <https://discuss.circleci.com/t/investigation-completed-for-cve-2024-3094/50839>\
**Category:** Security\
**Tags:** cve\
**Created:** [March 29, 2024, 10:03pm UTC](https://discuss.circleci.com/t/investigation-completed-for-cve-2024-3094/50839 "2024-03-29T22:03:49Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![kami](https://sea2.discourse-cdn.com/circleci/user_avatar/discuss.circleci.com/kami/32/35940_2.png) [@kami](https://discuss.circleci.com/u/kami)\
**Post date:** [March 29, 2024, 10:03pm UTC](https://discuss.circleci.com/t/investigation-completed-for-cve-2024-3094/50839/1 "2024-03-29T22:03:49Z")

</div>

Hi everyone,

We are sharing a word from our Security Team about [CVE-2024-3094](https://nvd.nist.gov/vuln/detail/CVE-2024-3094). We took action to look at our convenience images for xz versions impacted (5.6.0 and 5.6.1). Our initial investigations indicate we do not supply impacted xz versions on any of our images.

It is always best practice to stay up to date on the latest convenience image.

More information about our convenience image policy can be found in [docs](https://circleci.com/docs/convenience-images-support-policy/).

Have a great weekend and happy building!