thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

jcoester

[
	{"alpha_2":"AD","alpha_3":"AND","name":"Andorra"},
	{"alpha_2":"AE","alpha_3":"ARE","name":"United Arab Emirates"},
	{"alpha_2":"AF","alpha_3":"AFG","name":"Afghanistan"},
	{"alpha_2":"AG","alpha_3":"ATG","name":"Antigua and Barbuda"},
	{"alpha_2":"AI","alpha_3":"AIA","name":"Anguilla"},
	{"alpha_2":"AL","alpha_3":"ALB","name":"Albania"},
	{"alpha_2":"AM","alpha_3":"ARM","name":"Armenia"},
	{"alpha_2":"AO","alpha_3":"AGO","name":"Angola"},
	{"alpha_2":"AR","alpha_3":"ARG","name":"Argentina"},