xz-utils backdoor (CVE-2024-3094) ยท updates https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094 A maintainer persona, 'Jia Tan', slipped a backdoor into the release tarballs of XZ Utils 5.6.0 and 5.6.1. Through liblzma it targeted OpenSSH's sshd on distributions that link sshd against libsystemd, so a key holder could get unauthenticated remote code execution. Andres Freund spotted it after noticing SSH logins using a lot of CPU on Debian sid. It reached only bleeding-edge distributions such as Fedora 41/Rawhide and Debian unstable before it was caught. en Wed, 29 May 2024 00:00:00 GMT xz-utils backdoor (CVE-2024-3094): Lasse Collin publishes review notes 1.0 and new clean XZ Utils releases https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094 https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094#2024-05-29-bfbc6192 Wed, 29 May 2024 00:00:00 GMT critical <p><a href="https://tukaani.org/xz-backdoor/">Source</a></p> xz-utils backdoor (CVE-2024-3094): XZ Git repositories available on GitHub again https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094 https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094#2024-04-09-28f74d4f Tue, 09 Apr 2024 00:00:00 GMT critical <p><a href="https://tukaani.org/xz-backdoor/">Source</a></p> xz-utils backdoor (CVE-2024-3094): xz@tukaani.org stops forwarding to Jia Tan https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094 https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094#2024-03-30-602dad30 Sat, 30 Mar 2024 00:00:00 GMT critical <p><a href="https://tukaani.org/xz-backdoor/">Source</a></p> xz-utils backdoor (CVE-2024-3094): Andres Freund discloses the backdoor on oss-security https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094 https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094#2024-03-29-fb830b36 Fri, 29 Mar 2024 00:00:00 GMT critical <p><a href="https://www.openwall.com/lists/oss-security/2024/03/29/4">Source</a></p> xz-utils backdoor (CVE-2024-3094): CISA alert: downgrade XZ Utils to an uncompromised version such as 5.4.6 https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094 https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094#2024-03-29-1a2e2724 Fri, 29 Mar 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094">Source</a></p> xz-utils backdoor (CVE-2024-3094): Red Hat urgent security alert for Fedora 41 and Rawhide users https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094 https://pwn.watch/i/xz-utils-backdoor-cve-2024-3094#2024-03-29-da80b886 Fri, 29 Mar 2024 00:00:00 GMT critical <p><a href="https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users">Source</a></p>