CVE-2024-3094 (#105)

fschlimb · web-flow · commit 41d8a89f3e80 · 2024-04-10T14:29:14.000+02:00
pinning xz to safe version
diff --git a/conda-recipe/meta.yaml b/conda-recipe/meta.yaml
@@ -25,6 +25,7 @@ requirements:
     - mpi4py
     - wheel
     - libzlib
+    - xz <=5.4.6  # CVE-2024-3094
 
   build:
     - {{compiler('gxx')}}
