xz security advisory

[Sushubh]

CVE-2024-3094 - Red Hat Customer Portal

CVE Details App

access.redhat.com

Pretty serious shit.

Malicious backdoor spotted in Linux compression library xz

: STOP USAGE OF FEDORA RAWHIDE, says Red Hat while Debian Unstable and others also affected

www.theregister.com

Everything I Know About the XZ Backdoor

Please note: This is being updated in real-time. The intent is to make sense of lots of simultaneous discoveries

boehs.org

Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094 | CISA

www.cisa.gov