XZ Utils backdoor (Simple English Wikipedia)

Salvatore, Bonaccorso (29 March 2024). "[SECURITY] [DSA 5649-1] xz-utils security update". debian-security-announce (Mailing list). Retrieved 29 March 2024.

duo.com (Global: low place; Simple English: low place)

O'Donnell-Welch, Lindsey (29 March 2024). "Red Hat, CISA Warn of XZ Utils Backdoor". Decipher. Archived from the original on 29 March 2024. Retrieved 29 March 2024.

gigazine.net (Global: 3,474^th place; Simple English: low place)

"Timeline summary of the backdoor attack on XZ Utils". Retrieved 7 April 2024.

github.com (Global: 383^rd place; Simple English: 1,322^nd place)

gist.github.com

James, Sam. "xz-utils backdoor situation (CVE-2024-3094)". GitHub. Archived from the original on 2 April 2024. Retrieved 2 April 2024.

helpnetsecurity.com (Global: low place; Simple English: low place)

Zorz, Zeljka (29 March 2024). "Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)". Help Net Security. Archived from the original on 29 March 2024. Retrieved 29 March 2024.

lwn.net (Global: 4,423^rd place; Simple English: low place)

Corbet, Jonathan. "A backdoor in xz". LWN. Archived from the original on 1 April 2024. Retrieved 2 April 2024.

nist.gov (Global: 355^th place; Simple English: 235^th place)

nvd.nist.gov

"CVE-2024-3094". National Vulnerability Database. NIST. Archived from the original on 2 April 2024. Retrieved 2 April 2024.

nytimes.com (Global: 7^th place; Simple English: 8^th place)

Roose, Kevin. "Did One Guy Just Stop a Huge Cyberattack?". The New York Times. Archived from the original on 4 April 2024. Retrieved 4 April 2024.

openwall.com (Global: low place; Simple English: low place)

"oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise". www.openwall.com. Retrieved 2024-04-08.
"oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise". www.openwall.com. Archived from the original on 1 April 2024. Retrieved 2024-04-03.

phoronix.com (Global: 4,683^rd place; Simple English: low place)

Larabel, Michael. "XZ Struck By Malicious Code That Could Allow Unauthorized Remote System Access". Phoronix. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
Larabel, Michael (29 March 2024). "GitHub Disables The XZ Repository Following Today's Malicious Disclosure". Phoronix. Archived from the original on 31 March 2024. Retrieved 31 March 2024.

redhat.com (Global: 5,386^th place; Simple English: 8,854^th place)

"Urgent security alert for Fedora 41 and Fedora Rawhide users". Red Hat. Archived from the original on 29 March 2024. Retrieved 29 March 2024.

suse.com (Global: low place; Simple English: low place)

"SUSE addresses supply chain attack against xz compression library". SUSE Communities. SUSE. Archived from the original on 29 March 2024. Retrieved 29 March 2024.

theregister.com (Global: 3,700^th place; Simple English: low place)

Claburn, Thomas. "Malicious backdoor spotted in Linux compression library xz". The Register. Archived from the original on 1 April 2024. Retrieved 1 April 2024.
Claburn, Thomas. "Malicious xz backdoor reveals fragility of open source". The Register. Retrieved 8 April 2024.

theverge.com (Global: 114^th place; Simple English: 254^th place)

Khalid, Amrita (2 April 2024). "How one volunteer stopped a backdoor from exposing Linux systems worldwide". The Verge. Archived from the original on 4 April 2024. Retrieved 4 April 2024.

web.archive.org (Global: 1^st place; Simple English: 1^st place)

Corbet, Jonathan. "A backdoor in xz". LWN. Archived from the original on 1 April 2024. Retrieved 2 April 2024.
"CVE-2024-3094". National Vulnerability Database. NIST. Archived from the original on 2 April 2024. Retrieved 2 April 2024.
Gatlan, Sergiu. "Red Hat warns of backdoor in XZ tools used by most Linux distros". BleepingComputer. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
Akamai Security Intelligence Group (1 April 2024). "XZ Utils Backdoor – Everything You Need to Know, and What You Can Do". Archived from the original on 2 April 2024. Retrieved 2 April 2024.
James, Sam. "xz-utils backdoor situation (CVE-2024-3094)". GitHub. Archived from the original on 2 April 2024. Retrieved 2 April 2024.
Zorz, Zeljka (29 March 2024). "Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)". Help Net Security. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
Goodin, Dan (1 April 2024). "What we know about the xz Utils backdoor that almost infected the world". Ars Technica. Archived from the original on 1 April 2024. Retrieved 1 April 2024.
"oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise". www.openwall.com. Archived from the original on 1 April 2024. Retrieved 2024-04-03.
Larabel, Michael. "XZ Struck By Malicious Code That Could Allow Unauthorized Remote System Access". Phoronix. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
O'Donnell-Welch, Lindsey (29 March 2024). "Red Hat, CISA Warn of XZ Utils Backdoor". Decipher. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
Claburn, Thomas. "Malicious backdoor spotted in Linux compression library xz". The Register. Archived from the original on 1 April 2024. Retrieved 1 April 2024.
"Urgent security alert for Fedora 41 and Fedora Rawhide users". Red Hat. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
Greenberg, Andy. "The Mystery of 'Jia Tan,' the XZ Backdoor Mastermind". Wired. Archived from the original on 3 April 2024. Retrieved 3 April 2024.
"Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094". CISA. 29 March 2024. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
"SUSE addresses supply chain attack against xz compression library". SUSE Communities. SUSE. Archived from the original on 29 March 2024. Retrieved 29 March 2024.
Larabel, Michael (29 March 2024). "GitHub Disables The XZ Repository Following Today's Malicious Disclosure". Phoronix. Archived from the original on 31 March 2024. Retrieved 31 March 2024.
Roose, Kevin. "Did One Guy Just Stop a Huge Cyberattack?". The New York Times. Archived from the original on 4 April 2024. Retrieved 4 April 2024.
Khalid, Amrita (2 April 2024). "How one volunteer stopped a backdoor from exposing Linux systems worldwide". The Verge. Archived from the original on 4 April 2024. Retrieved 4 April 2024.

wired.com (Global: 193^rd place; Simple English: 178^th place)

Greenberg, Andy. "The Mystery of 'Jia Tan,' the XZ Backdoor Mastermind". Wired. Archived from the original on 3 April 2024. Retrieved 3 April 2024.

XZ Utils backdoor (Simple English Wikipedia)

akamai.com (Global: low place; Simple English: low place)

arstechnica.com (Global: 388th place; Simple English: 577th place)

bleepingcomputer.com (Global: 6,171st place; Simple English: 1,061st place)

cisa.gov (Global: low place; Simple English: low place)

connortumbleson.com (Global: low place; Simple English: low place)

debian.org (Global: 3,857th place; Simple English: 5,218th place)

lists.debian.org

duo.com (Global: low place; Simple English: low place)

gigazine.net (Global: 3,474th place; Simple English: low place)

github.com (Global: 383rd place; Simple English: 1,322nd place)

gist.github.com

helpnetsecurity.com (Global: low place; Simple English: low place)

lwn.net (Global: 4,423rd place; Simple English: low place)

nist.gov (Global: 355th place; Simple English: 235th place)

nvd.nist.gov

nytimes.com (Global: 7th place; Simple English: 8th place)

openwall.com (Global: low place; Simple English: low place)

phoronix.com (Global: 4,683rd place; Simple English: low place)

redhat.com (Global: 5,386th place; Simple English: 8,854th place)

suse.com (Global: low place; Simple English: low place)

theregister.com (Global: 3,700th place; Simple English: low place)

theverge.com (Global: 114th place; Simple English: 254th place)

web.archive.org (Global: 1st place; Simple English: 1st place)

wired.com (Global: 193rd place; Simple English: 178th place)

arstechnica.com (Global: 388^th place; Simple English: 577^th place)

bleepingcomputer.com (Global: 6,171^st place; Simple English: 1,061^st place)

debian.org (Global: 3,857^th place; Simple English: 5,218^th place)

gigazine.net (Global: 3,474^th place; Simple English: low place)

github.com (Global: 383^rd place; Simple English: 1,322^nd place)

lwn.net (Global: 4,423^rd place; Simple English: low place)

nist.gov (Global: 355^th place; Simple English: 235^th place)

nytimes.com (Global: 7^th place; Simple English: 8^th place)

phoronix.com (Global: 4,683^rd place; Simple English: low place)

redhat.com (Global: 5,386^th place; Simple English: 8,854^th place)

theregister.com (Global: 3,700^th place; Simple English: low place)

theverge.com (Global: 114^th place; Simple English: 254^th place)

web.archive.org (Global: 1^st place; Simple English: 1^st place)

wired.com (Global: 193^rd place; Simple English: 178^th place)