XZ Utils Backdoor: Supply Chain Vulnerability (CVE-2024-3094)

Introduction

XZ Utils is a set of open-source compression utilities for compressing and decompressing files using the LZMA compression algorithm, known for its high lossless compression ratio. XZ Utils is famous for compressing release tarballs, software packages, kernel images, and initramfs (initial ram file system) images. It’s favored for significantly reducing file sizes while maintaining data integrity. This utility is so widely used that it’s typically pre-installed on most Linux and macOS systems, making it readily available for users without …

algorithm backdoor compression cve cve-2024 cve-2024-3094 file files file system high images introduction kernel packages release software supply supply chain supply chain vulnerability system utilities vulnerability xz utils