corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08757-47c7-73f6-862c-e56ba68ee90d

Everything I Know About the XZ Backdoor

Evan Boehs · published 29 March 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at boehs.org Wayback capture
27blogs citing
First cited
30 Mar 2024
Most recent
24 Jul 2026
Rank this month
not ranked
Links from this post
52
Words captured
1,903

Cited by

Blog
In the post
Date
eternodevir.com
Collections: Articles Read at the source ↗
24 Jul 2026
Stefan Scherfke
Publishing to PyPI with a Trusted Publisher from GitLab CI/CD Read at the source ↗
14 Nov 2024
Introduction · Addison Crump
Why I don't write exploits* Read at the source ↗
6 Oct 2024
irenes.space
xz and community Read at the source ↗
30 Sept 2024
Christian Heilmann
A billion new developers thanks to AI? Read at the source ↗
12 Sept 2024
Christian Heilmann
Eine Milliarde neuer Entwickler dank KI? Linkliste Read at the source ↗
2 Sept 2024
fy.blackhats.net.au
Reproducible Builds Read at the source ↗
24 May 2024
blog.stellersjay.pub
Now and Later Bug Hunting Side Quest [04/28/24] Read at the source ↗
28 Apr 2024
Kaspersky Securelist
Assessing the Y, and How, of the XZ Utils incident Read at the source ↗
24 Apr 2024
share.transistor.fm
Discovering the XZ Backdoor with Andres Freund Read at the source ↗
10 Apr 2024
gendignoux.com
Thoughts on the xz backdoor: an lzma-rs perspective Read at the source ↗
8 Apr 2024
The Changelog
The xz Issue Isn’t About Open Source Read at the source ↗
4 Apr 2024
beny23.github.io
XZ Backdoor: Not the End of Open Source Read at the source ↗
4 Apr 2024
swehack.se
The XZ backdoor Read at the source ↗
2 Apr 2024
Russ Cox
Timeline of the xz open source attack Read at the source ↗
2 Apr 2024
crankysec.com
It's not a supply chain, dummy! Read at the source ↗
2 Apr 2024
Michael Tsai
xz Backdoor Read at the source ↗
1 Apr 2024
wersdoerfer.de
Weeknotes 2024-04-01 Read at the source ↗
1 Apr 2024
maia.crimew.gay
so i guess i hacked samsung?! Read at the source ↗
1 Apr 2024
artemislena.eu
March 2024 security and privacy news Read at the source ↗
31 Mar 2024
lostfocus
Week 13, 2024: Eggs! Z? Read at the source ↗
31 Mar 2024
Shellsharks
xz/liblzma Compromise Link Roundup Read at the source ↗
31 Mar 2024
elver.me
Weeknotes 144: Sneaky backdoor Read at the source ↗
31 Mar 2024
_zeta
The xz backdoor from a Security Engineer persepective Read at the source ↗
30 Mar 2024
thesoloadmin.com
Supply Chain Intrigue, or The Spy Who Shagged My Repo Read at the source ↗
30 Mar 2024
1a-insec.net
Seeing Suspicious Accounts On Github Read at the source ↗
30 Mar 2024
lowendbox.com
The Mother of All Supply Chain Attacks! Is 1Password Safe?!? (UPDATED) Read at the source ↗
30 Mar 2024
lifecs.likai.org
Mitigation strategy for SSH server supply chain attack Read at the source ↗
30 Mar 2024

Links from this post

Link
Host
https://boehs.org/states/
boehs.org
https://boehs.org/state/evergreen
boehs.org
https://boehs.org/tag/open-source
boehs.org
https://github.com/libarchive/libarchive/pull/1609
github.com
https://github.com/libarchive/libarchive/blob/master/tar/read.c
github.com
https://github.com/libarchive/libarchive/pull/2101
github.com
https://www.mail-archive.com/xz-devel@tukaani.org/msg00565.html
mail-archive.com
https://www.mail-archive.com/xz-devel@tukaani.org/msg00566.html
mail-archive.com
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=aa75c5563a760aea3aa23d997d519e702e82726b
git.tukaani.org
https://www.mail-archive.com/search?l=xz-devel@tukaani.org&q=Kumar&x=0&y=0
mail-archive.com
https://www.mail-archive.com/search?l=xz-devel@tukaani.org&q=from:%22Dennis+Ens%22
mail-archive.com
https://mastodon.social/@glyph/112180922900094371
mastodon.social
https://social.coop/@eb
social.coop
https://github.com/tukaani-project/xz/pull/7
github.com
https://github.com/JiaT75/oss-fuzz/commit/6403e93344476972e908ce17e8244f5c2b957dfd
github.com
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=ee44863ae88e377a5df10db007ba9bfadde3d314
git.tukaani.org
https://github.com/tukaani-project/xz/pull/53
github.com
https://github.com/google/oss-fuzz/pull/10667
github.com
https://github.com/llvm/llvm-project/issues/63957
github.com
https://github.com/google/oss-fuzz/pull/11587
github.com
http://tukaani.org/xz/
tukaani.org
http://xz.tukaani.org/xz-utils/
xz.tukaani.org
http://tukaani.org
tukaani.org
https://www.zoner.fi/
zoner.fi
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=cf44e4b7f5dfdbf8c78aef377c10f71e274f63c0
git.tukaani.org
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=6e636819e8f070330d835fce46289a3ff72a7b89
git.tukaani.org
https://www.openwall.com/lists/oss-security/2024/03/29/4
openwall.com
https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27
gist.github.com
https://gynvael.coldwind.pl/?lang=en&id=782
gynvael.coldwind.pl
https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b
bsky.app
https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9f504
gist.github.com
https://infosec.exchange/@fr0gger/112189232773640259
infosec.exchange
https://github.com/amlweems/xzbot
github.com
The xz attack shell script Read at the source ↗
research.swtch.com
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067708
bugs.debian.org
https://salsa.debian.org/hjansen
salsa.debian.org
https://github.com/jamespfennell/xz/pull/2
github.com
https://news.ycombinator.com/item?id=39866275
news.ycombinator.com
https://bugs.launchpad.net/ubuntu/+source/xz-utils/+bug/2059417
bugs.launchpad.net
https://github.com/JiaT75?tab=following
github.com
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=f9cf4c05edd14dedfe63833f8ccbe41b55823b00
git.tukaani.org
https://git.tukaani.org/?p=xz.git;a=commitdiff;h=328c52da8a2bbb81307644efdb58db2c422d9ba7
git.tukaani.org
https://tukaani.org/xz-backdoor/
tukaani.org
https://play.clickhouse.com/play?user=play
play.clickhouse.com
https://github.com/minhuw
github.com
https://rheaeve.substack.com/p/xz-backdoor-times-damned-times-and
rheaeve.substack.com
https://lunduke.locals.com/post/5467061/xz-backdoor-i-did-a-more-thorough-analysis-and-i-changed-my-mind-again-specifically-i-compar
lunduke.locals.com
https://github.com/ryjones
github.com
https://github.com/ryjones/jiat75-logs
github.com
Bountysource Stole at Least $21,000 from Open Source Developers Read at the source ↗
boehs.org
How Did the Blog Do in 2024? Read at the source ↗
boehs.org
https://www.mail-archive.com/xz-devel@tukaani.org/msg00567.html
mail-archive.com