Red Hat, CISA Warn of XZ Utils Backdoor

Red Hat said on Friday released an “urgent security alert” warning users of malicious code embedded in certain versions of XZ Utils, a popular set of data compression software tools. Certain Fedora Linux distribution versions may be impacted, and Red Hat urged customers to immediately stop using Fedora Rawhide instances for work or personal activity.

The malicious code (which is being tracked as CVE-2024-3094) is embedded in XZ Utils versions 5.6.0 and 5.6.1, and may allow unauthorized access to impacted …

alert backdoor cisa code compression customers data data compression distribution embedded fedora linux malicious may popular red hat security security alert software tools urgent warning work