Archive-Opsec

Search

/ to open · ↑↓ to move · Enter to open

Indexes guides, archive entries, news, resources and sources. Nothing is sent to a third party.

News

News digest · 29 March 2024

XZ Utils backdoor disclosed

A short source-linked digest of the disclosure that identified a backdoor in XZ Utils 5.6.0 and 5.6.1.

This is a source-linked digest, not a republication of the original reporting. The archive entry contains the longer timeline and claim labels.

Sources

Sources are linked for readers to inspect directly.

  1. Backdoor in upstream xz/liblzma leading to ssh server compromise oss-security docs Accessed
  2. CVE-2024-3094 National Vulnerability Database government Accessed