Malicious Backdoor Found in Linux
Malicious Backdoor Found in Linux
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.
https://thehackernews.com/2024/03/urgent-secret-backdoor-found-in-xz.html
https://en.wikipedia.org/wiki/XZ_Utils
https://nvd.nist.gov/vuln/detail/CVE-2024-3094
https://www.openwall.com/lists/oss-security/2024/03/29/4
🔔 SUBSCRIBE for more:
https://www.youtube.com/user/Britec09?sub_confirmation=1
------------------------------------------------------------------------------------------
🛍 Support me with your Amazon purchases:
UK https://amzn.to/3diZslY
US https://amzn.to/2OwZWux
Please note that as an Amazon Associate I earn a commission from any qualifying purchases that you may make through these links.
------------------------------------------------------------------------------------------
❤️ Join Britec YouTube Members:
https://www.youtube.com/channel/UC_M-iWYpQbgo4rK1YfewI5w/join
------------------------------------------------------------------------------------------
📃Watch related playlists and videos
🖥️https://www.youtube.com/user/Britec09/playlists
------------------------------------------------------------------------------------------
👕Check out our merch:
https://teespring.com/en-GB/stores/britec-store
------------------------------------------------------------------------------------------
💻Discord Access:
https://discord.gg/YAuGm5j
------------------------------------------------------------------------------------------
🐦Follow and interact with me on Twitter:
http://twitter.com/Britec09
------------------------------------------------------------------------------------------
✅Follow and interact with me on Facebook:
http://facebook.com/BritecComputers
-----------------------------------------------------------------------------------------
🎬 View my Website:
http://BritecComputers.co.uk
-----------------------------------------------------------------------------------------