Get the inside scoop with LoginTC and learn about relevant security news and insights.
April 03, 2024 •
In light of the public disclosure of the compromised xz library packages (CVE-2024-3094), our security team has performed a thorough review of the xz library packages in all LoginTC appliances.
No, LoginTC Cloud services are not affected.
No, LoginTC appliances are not affected. This includes:
Furthermore, newer versions of LoginTC appliances (LoginTC RADIUS Connector 4.x.x) have SSH access disabled by default to minimize the potential attack surface for vulnerabilities.
No, other LoginTC connectors and software do not include any xz library packages and are not affected.
If you are currently running the LoginTC RADIUS Connector 3.x.x, we strongly recommend you upgrade to LoginTC RADIUS Connector 4.x.x before the June 30, 2024 end-of-life date. See the LoginTC RADIUS Connector Upgrade Guide for instructions.
If you have any questions about our security review, don’t hesitate to reach out by phone at 1-877-564-4682 or email at support@cyphercor.com.