Backdoored XZ Utils (CVE-2024-3094) | Rapid7 Blog

rapid7.com

On Friday, March 29, developer Andres Freund shared that he had discovered an upstream backdoor in widely used command line tool XZ Utils (liblzma).

1 page links to this URL

Shellsharks Michael Sass Mar 31, 2024

Links to analysis, discussion and more related to the xz/liblzma compromise (CVE-2024-3094).

2 inbound links article en infosec xz/liblzma Compromise Link Roundupshellsharksinfosecsupplychain