thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

ustayready

import openai
import boto3
import json
import time
from typing import Dict, List

openai.api_key = '### SET YOUR OPENAPI API KEY HERE ###'
session = boto3.session.Session()
client = session.client('iam')

lcahlander

xquery version "1.0";    
(:~
The module contains variables for each of the unicode escape sequences at 
<a href="https://en.wikipedia.org/wiki/List_of_XML_and_HTML_character_entity_references">https://en.wikipedia.org/wiki/List_of_XML_and_HTML_character_entity_references</a>

 :)
module namespace encchars="http://w3.org/encoded/characters";    

(:               Name                    Escape Sequence     Description :)
declare variable $encchars:quot          := "&#34;";         (: quotation mark (APL quote) :)