Skip to content

Glossary: Threat Vectors: Files, Networks and Endpoints

XZ Utils (CVE-2024-3094)

Also written: XZ Utils, CVE-2024-3094

A Linux compression library whose versions 5.6.0 and 5.6.1 contained a backdoor. A contributor added it after spending about two years earning trust.

Where the book teaches it

Related terms

backdoorsupply chain-based vectorSBOM (software bill of materials)