xz-backdoor-github

xz-बैकडोर-गिटहब 29 मार्च 2024 को खोजे गए xz बैकडोर से संबंधित कमिट का इतिहास: CVE-2024-3094। वर्तमान में GitHub ने ToS उल्लंघनों के लिए रिपॉजिटरी हटा दी है। इसका उद्देश्य यह सुविधा प्रदान करना है कि कैसे इस बैकडोर को 2 वर्षों के सक्रिय योगदान के दौरान चुपके से डाला गया, तथा अन्य संभावित मुद्दों क...

Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution

The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed. The audacious supply chain compromise, tracked as CVE-2024-3094 CVSS score: 10.0, came...

Tukaani Project XZ Utils Backdoor (Feb/Mar 2024)

The XZ Utils of the Tukaani Project have been backdoored by an unknown threat actor in February and March 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

Red Hat on Friday released an "urgent security alert" warning that two versions of a popular data compression library called XZ Utils previously LZMA Utils have been backdoored with malicious code designed to allow unauthorized remote access. The software supply chain compromise, tracked as...