VirtualTam's bookmarks

1. oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise 2024-03-31

   tags: compression/lzma, compression/xz, linux, programming/c, programming/shell/bash, security, security/backdoor

   [ permalink ]

   • XZ Utils backdoor
   • xz/liblzma: Bash-stage Obfuscation Explained
   • /r/Linux - XZ Utils backdoor
   • Debian Bug report logs - #1068024 revert to version that does not contain changes by bad actor
   • FAQ on the xz-utils backdoor
   • LWN - A backdoor in xz
   • Everything I Know About the Xz Backdoor