CVE-2024-3094: Critical RCE Vulnerability Found in XZ Utils | Wiz Blog
CVE-2024-3094 is a malicious code vulnerability in versions 5.6.0 and 5.6.1 of XZ Utils, enabling an SSH authentication bypass in certain Linux distributions
Red Hat warns of backdoor in XZ tools used by most Linux distros
bleepingcomputer.comToday, Red Hat warned users to immediately stop using systems running Fedora development and experimental versions because of a backdoor found in the latest XZ Utils data compression tools and libraries.
brew install xz installs the outdated version 5.4.6 instead of 5.6.1 · Homebrew · Discussion #5243
Output of brew config HOMEBREW_VERSION: 4.2.15 ORIGIN: https://github.com/Homebrew/brew HEAD: 92a4311868322188478d7a90511ec0e8e6b0d7df Last commit: 5 days ago Core tap JSON: 29 Mar 18:18 UTC Core c...
xz/liblzma Compromise Link Roundup
Links to analysis, discussion and more related to the xz/liblzma compromise (CVE-2024-3094).