XZ实用程序后门 (Chinese Wikipedia)

Salvatore, Bonaccorso. [SECURITY] [DSA 5649-1] xz-utils security update. debian-security-announce (邮件列表). 2024-03-29 [2024-03-29]. （原始内容存档于2024-03-29）（英语）.

duo.com (Global: low place; Chinese: low place)

O'Donnell-Welch, Lindsey. Red Hat, CISA Warn of XZ Utils Backdoor. Decipher. 2024-03-29 [2024-03-29]. （原始内容存档于2024-03-29）（英语）.

github.com (Global: 383^rd place; Chinese: 336^th place)

gist.github.com

James, Sam. xz-utils backdoor situation (CVE-2024-3094). GitHub. [2024-04-02]. （原始内容存档于2024-04-02）（英语）.

helpnetsecurity.com (Global: low place; Chinese: low place)

Zorz, Zeljka. Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094). Help Net Security. 2024-03-29 [2024-03-29]. （原始内容存档于2024-03-29）.

lwn.net (Global: 4,423^rd place; Chinese: 3,859^th place)

Corbet, Jonathan. A backdoor in xz. LWN. [2024-04-02]. （原始内容存档于2024-04-01）.

nist.gov (Global: 355^th place; Chinese: 411^th place)

nvd.nist.gov

CVE-2024-3094. National Vulnerability Database. NIST. [2024-04-02]. （原始内容存档于2024-04-02）.

nytimes.com (Global: 7^th place; Chinese: 31^st place)

Roose, Kevin. Did One Guy Just Stop a Huge Cyberattack?. The New York Times. [2024-04-04]. （原始内容存档于2024-04-04）.

openwall.com (Global: low place; Chinese: low place)

oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise. www.openwall.com. [2024-04-03]. （原始内容存档于2024-04-01）.

phoronix.com (Global: 4,683^rd place; Chinese: 4,615^th place)

Larabel, Michael. XZ Struck By Malicious Code That Could Allow Unauthorized Remote System Access. Phoronix. [2024-03-29]. （原始内容存档于2024-03-29）（英语）.
Larabel, Michael. GitHub Disables The XZ Repository Following Today's Malicious Disclosure. Phoronix. 2024-03-29 [2024-03-31]. （原始内容存档于2024-03-31）（英语）.

redhat.com (Global: 5,386^th place; Chinese: 4,369^th place)

Urgent security alert for Fedora 41 and Fedora Rawhide users. Red Hat. [2024-03-29]. （原始内容存档于2024-03-29）（英语）.

suse.com (Global: low place; Chinese: low place)

SUSE addresses supply chain attack against xz compression library. SUSE Communities. SUSE. [2024-03-29]. （原始内容存档于2024-03-29）.

theregister.com (Global: 3,700^th place; Chinese: 4,616^th place)

Claburn, Thomas. Malicious backdoor spotted in Linux compression library xz. The Register. [2024-04-01]. （原始内容存档于2024-04-01）（英语）.

theverge.com (Global: 114^th place; Chinese: 276^th place)

Khalid, Amrita. How one volunteer stopped a backdoor from exposing Linux systems worldwide. The Verge. 2024-04-02 [2024-04-04]. （原始内容存档于2024-04-04）（英语）.

web.archive.org (Global: 1^st place; Chinese: 1^st place)

Corbet, Jonathan. A backdoor in xz. LWN. [2024-04-02]. （原始内容存档于2024-04-01）.
CVE-2024-3094. National Vulnerability Database. NIST. [2024-04-02]. （原始内容存档于2024-04-02）.
Gatlan, Sergiu. Red Hat warns of backdoor in XZ tools used by most Linux distros. BleepingComputer. [2024-03-29]. （原始内容存档于2024-03-29）（美国英语）.
Akamai Security Intelligence Group. XZ Utils Backdoor – Everything You Need to Know, and What You Can Do. 2024-04-01 [2024-04-02]. （原始内容存档于2024-04-02）.
James, Sam. xz-utils backdoor situation (CVE-2024-3094). GitHub. [2024-04-02]. （原始内容存档于2024-04-02）（英语）.
Zorz, Zeljka. Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094). Help Net Security. 2024-03-29 [2024-03-29]. （原始内容存档于2024-03-29）.
Goodin, Dan. What we know about the xz Utils backdoor that almost infected the world. Ars Technica. 2024-04-01 [2024-04-01]. （原始内容存档于2024-04-01）（美国英语）.
oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise. www.openwall.com. [2024-04-03]. （原始内容存档于2024-04-01）.
Claburn, Thomas. Malicious backdoor spotted in Linux compression library xz. The Register. [2024-04-01]. （原始内容存档于2024-04-01）（英语）.
Larabel, Michael. XZ Struck By Malicious Code That Could Allow Unauthorized Remote System Access. Phoronix. [2024-03-29]. （原始内容存档于2024-03-29）（英语）.
O'Donnell-Welch, Lindsey. Red Hat, CISA Warn of XZ Utils Backdoor. Decipher. 2024-03-29 [2024-03-29]. （原始内容存档于2024-03-29）（英语）.
Urgent security alert for Fedora 41 and Fedora Rawhide users. Red Hat. [2024-03-29]. （原始内容存档于2024-03-29）（英语）.
Watching xz unfold from afar. [2024-04-06]. （原始内容存档于2024-04-06）.
Greenberg, Andy. The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind. Wired. [2024-04-03]. （原始内容存档于2024-04-03）.
Reported Supply Chain Compromise Affecting XZ Utils Data Compression Library, CVE-2024-3094. CISA. 2024-03-29 [2024-03-29]. （原始内容存档于2024-03-29）（英语）.
SUSE addresses supply chain attack against xz compression library. SUSE Communities. SUSE. [2024-03-29]. （原始内容存档于2024-03-29）.
Salvatore, Bonaccorso. [SECURITY] [DSA 5649-1] xz-utils security update. debian-security-announce (邮件列表). 2024-03-29 [2024-03-29]. （原始内容存档于2024-03-29）（英语）.
Larabel, Michael. GitHub Disables The XZ Repository Following Today's Malicious Disclosure. Phoronix. 2024-03-29 [2024-03-31]. （原始内容存档于2024-03-31）（英语）.
Roose, Kevin. Did One Guy Just Stop a Huge Cyberattack?. The New York Times. [2024-04-04]. （原始内容存档于2024-04-04）.
Khalid, Amrita. How one volunteer stopped a backdoor from exposing Linux systems worldwide. The Verge. 2024-04-02 [2024-04-04]. （原始内容存档于2024-04-04）（英语）.

wired.com (Global: 193^rd place; Chinese: 421^st place)

Greenberg, Andy. The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind. Wired. [2024-04-03]. （原始内容存档于2024-04-03）.

XZ实用程序后门 (Chinese Wikipedia)

akamai.com (Global: low place; Chinese: low place)

arstechnica.com (Global: 388th place; Chinese: 546th place)

bleepingcomputer.com (Global: 6,171st place; Chinese: 5,964th place)

cisa.gov (Global: low place; Chinese: low place)

connortumbleson.com (Global: low place; Chinese: low place)

debian.org (Global: 3,857th place; Chinese: 3,200th place)

lists.debian.org

duo.com (Global: low place; Chinese: low place)

github.com (Global: 383rd place; Chinese: 336th place)

gist.github.com

helpnetsecurity.com (Global: low place; Chinese: low place)

lwn.net (Global: 4,423rd place; Chinese: 3,859th place)

nist.gov (Global: 355th place; Chinese: 411th place)

nvd.nist.gov

nytimes.com (Global: 7th place; Chinese: 31st place)

openwall.com (Global: low place; Chinese: low place)

phoronix.com (Global: 4,683rd place; Chinese: 4,615th place)

redhat.com (Global: 5,386th place; Chinese: 4,369th place)

suse.com (Global: low place; Chinese: low place)

theregister.com (Global: 3,700th place; Chinese: 4,616th place)

theverge.com (Global: 114th place; Chinese: 276th place)

web.archive.org (Global: 1st place; Chinese: 1st place)

wired.com (Global: 193rd place; Chinese: 421st place)

arstechnica.com (Global: 388^th place; Chinese: 546^th place)

bleepingcomputer.com (Global: 6,171^st place; Chinese: 5,964^th place)

debian.org (Global: 3,857^th place; Chinese: 3,200^th place)

github.com (Global: 383^rd place; Chinese: 336^th place)

lwn.net (Global: 4,423^rd place; Chinese: 3,859^th place)

nist.gov (Global: 355^th place; Chinese: 411^th place)

nytimes.com (Global: 7^th place; Chinese: 31^st place)

phoronix.com (Global: 4,683^rd place; Chinese: 4,615^th place)

redhat.com (Global: 5,386^th place; Chinese: 4,369^th place)

theregister.com (Global: 3,700^th place; Chinese: 4,616^th place)

theverge.com (Global: 114^th place; Chinese: 276^th place)

web.archive.org (Global: 1^st place; Chinese: 1^st place)

wired.com (Global: 193^rd place; Chinese: 421^st place)