Stefan Ring Ringdingcoder

## xz-backdoor.md

      
              1 file
            
          
              62 forks
            
          
              564 comments
            
          
              1291 stars
            
          
                thesamesam
                / xz-backdoor.md
            
            
              Last active
              May 4, 2024 09:26
            
              
                xz-utils backdoor situation (CVE-2024-3094)
              
          
    FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good
faith of being accurate, but like I just said; we don't yet know everything
about what's going on.
Background

On March 29th, 2024, a backdoor was discovered in
xz-utils, a suite of software that

  
## makeauthority.sh
# Run this once
openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt

## README.rst

      
              2 files
            
          
              121 forks
            
          
              18 comments
            
          
              579 stars
            
          
                dupuy
                / README.rst
            
            
              Last active
              May 5, 2024 18:42
            
              
                Common markup for Markdown and reStructuredText
              
          
    Markdown and reStructuredText

GitHub supports several lightweight markup languages for documentation; the most popular ones (generally, not just at GitHub) are Markdown and reStructuredText. Markdown is sometimes considered easier to use, and is often preferred when the purpose is simply to generate HTML. On the other hand, reStructuredText is more extensible and powerful, with native support (not just embedded HTML) for tables, as well as things like automatic generation of tables of contents.

  
## gist:925323

      
              1 file
            
          
              14 forks
            
          
              3 comments
            
          
              31 stars
            
          
                rednaxelafx
                / gist:925323
            
            
              Last active
              October 25, 2023 05:30
            
              
                Correspondence between Sun/Oracle JDK, OpenJDK and HotSpot VM versions
              
          
    Correspondence between Sun/Oracle JDK, OpenJDK and HotSpot VM versions


build date
Sun/Oracle JDK Version
OpenJDK Version
HotSpot VM Version


2006-11-29
1.6.0-b105

1.6.0-b105


2007-03-14
1.6.0_01-b06

1.6.0_01-b06


2007-06-22
1.6.0_02-b05

1.6.0_02-b05


2007-09-24
1.6.0_03-b05

1.6.0_03-b05


2007-12-14
1.6.0_04-b12

10.0-b19
	# Run this once
	openssl genrsa -des3 -out ca.key 4096
	openssl req -new -x509 -days 365 -key ca.key -out ca.crt
build date	Sun/Oracle JDK Version	HotSpot VM Version
2006-11-29	1.6.0-b105	1.6.0-b105
2007-03-14	1.6.0_01-b06	1.6.0_01-b06
2007-06-22	1.6.0_02-b05	1.6.0_02-b05
2007-09-24	1.6.0_03-b05	1.6.0_03-b05
2007-12-14	1.6.0_04-b12	10.0-b19