Glossary: Threat Vectors: Files, Networks and Endpoints
XZ Utils (CVE-2024-3094)
Also written: XZ Utils, CVE-2024-3094
A Linux compression library whose versions 5.6.0 and 5.6.1 contained a backdoor. A contributor added it after spending about two years earning trust.
Where the book teaches it
Related terms
backdoorsupply chain-based vectorSBOM (software bill of materials)