Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

RedHat on Friday released an "urgent security alert" warning that two versions of a popular data compression library called XZ Utils (previously LZMA Utils) have been backdoored with malicious code designed to allow unauthorized remote access.
The software supply chain compromise, tracked as CVE-2024-3094, has a CVSS score of 10.0, indicating maximum severity. It impacts XZ Utils

access alert backdoor called code compression compromise cve cve-2024 cvss cvss score data data compression found library linux linux distros major malicious popular redhat remote access score secret security security alert software software supply chain supply supply chain supply chain compromise unauthorized urgent warning