Displaying items by tag: xz utils

The repository of the open-source compression utility xz Utils, in which a backdoor was found prior to the Easter weekend, has now been restored to GitHub.

The original maintainer of the xz Utils package, which was backdoored and almost distributed to production Linux systems, is yet to make any public comment about the incident, saying he first needs to understand the situation thoroughly.

An alert developer appears to have prevented a backdoor — likely introduced into a compression utility by state-backed actors — from being distributed to production Linux systems. The malicious code appears to allow the bypassing of checks during SSH authentication.