thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

kimbtech

function LCSPalindrome( string ){
	//erstelle Array von chars, eins rueckwaerts
	var s = string.split('');
	var t = string.split('')
	t = t.reverse();
	
	//Erstelle zwei Matrizen fuer LCS
	//	JS ist hier komisch
	var pl = [];
	var way = [];

hackprime

var TRIPLET_NAMES = [
      null,
      ['тысяча', 'тысячи', 'тысяч'],
      ['миллион', 'миллиона', 'миллионов'],
      ['миллиард', 'миллиарда', 'миллиардов'],
      ['триллион', 'триллиона', 'триллионов'],
      ['квадриллион', 'квадриллиона', 'квадриллионов'],
    ],
    ZERO_NAME = 'нуль',
    ONE_THOUSANT_NAME = 'одна',