XZ | BestHub

IT Services Circle

Apr 2, 2024 · Information Security

Malicious Code Discovered in xz 5.6.0/5.6.1 Packages Affecting Fedora 40 and Rawhide (CVE‑2024‑3094)

Red Hat's urgent security advisory reveals that the latest xz 5.6.0/5.6.1 tools and libraries contain sophisticated malicious code that can grant unauthorized remote access, impacting Fedora 40, Fedora 41, and Rawhide while leaving all RHEL versions unaffected.

CVE-2024-3094FedoraGitHub

0 likes · 5 min read

Malicious Code Discovered in xz 5.6.0/5.6.1 Packages Affecting Fedora 40 and Rawhide (CVE‑2024‑3094)

Wukong Talks Architecture

Apr 1, 2024 · Information Security

Investigation of the xz Backdoor Vulnerability and Its Attack Chain

A recent security analysis reveals how a malicious contributor infiltrated the open‑source xz compression tool over two and a half years, inserted a backdoor using IFUNC hooks to compromise OpenSSH, and was eventually uncovered due to a CPU‑spike bug, highlighting severe risks for Linux and macOS systems.

Information SecurityOpenSSHXZ

0 likes · 8 min read

Investigation of the xz Backdoor Vulnerability and Its Attack Chain

Selected Java Interview Questions

Jan 24, 2022 · Operations

Common Linux Compression and Archiving Tools: Commands and Usage

This article provides a comprehensive overview of the most frequently used Linux compression utilities (zip, gzip, bzip2, xz) and the tar archiving command, detailing their syntax, key options, how to combine them, and practical examples for compressing and extracting files and directories.

Bzip2Command LineLinux

0 likes · 9 min read

Common Linux Compression and Archiving Tools: Commands and Usage