Skip to content

Glossary: Physical and Wireless Vectors, and Vulnerabilities

XZ Utils

Also written: CVE-2024-3094, xz

A Linux compression library in which a trusted maintainer hid a backdoor in versions 5.6.0 and 5.6.1 in 2024. Ubuntu's fix package '5.6.1+really5.4.5' is a rollback dressed as an update.

Where the book teaches it

Related terms

Malicious updateSupply chain-based vectordpkg