FRISS! - Backdoor-t találtak az XZ Utils library-ban, több nagyobb Linux disztribútor is érintett

[Gabywap]

Backdoor-t találtak az XZ Utils library-ban, több nagyobb Linux disztribútor is érintett

🛑 URGENT SECURITY ALERT!

Secret backdoor found in XZ Utils compression library used by major #Linux distros, like Fedora, Kali Linux, and openSUSE. Attackers could breach SSH and take control of systems.https://t.co/lnZC90oC2k

Update and review your systems immediately.

— The Hacker News (@TheHackersNews) March 30, 2024

RedHat on Friday released an "urgent security alert" warning that two versions of a popular data compression library called XZ Utils (previously LZMA Utils) have been backdoored with malicious code designed to allow unauthorized remote access.

The software supply chain compromise, tracked as CVE-2024-3094, has a CVSS score of 10.0, indicating maximum severity. It impacts XZ Utils versions 5.6.0 (released February 24) and 5.6.1 (released March 9).

 Forrás: Backdoor-t találtak az XZ Utils library-ban, több nagyobb Linux disztribútor is érintett

FRISS!