The Narrow Escape from the xz Disaster

Originally published by Dazz.Written by Tomer Schwartz, Co-founder & CTO, Dazz.In the intricate world of software supply chain, the recent near-miss incident with CVE-2024-3094–the xz/liblzma backdoor–serves as a potent reminder of our system's fragility and the constant vigilance required to safeguard it. In short, a widely used open source package was compromised to add a backdoor to its officially released packages. For the uninformed, technical advisory says only versions 5.6.0 and 5....

amp backdoor co-founder compromised cto cve cve-2024 cve-2024-3094 disaster escape founder incident near open source package reminder safeguard software software supply chain supply supply chain system vigilance world written