thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

shaypal5

Taken from a post by Stuart Colville at https://muffinresearch.co.uk/selectively-including-parts-readme-rst-in-your-docs/. Here only to make this star-able by myself.

In your README.rst add a marker marking from which point you want to start importing content:

Blah blah project  
=================

Here's all the actual readme content.

marcora

#!/bin/sh

echo "installing fonts at $PWD to ~/.fonts/"
mkdir -p ~/.fonts/adobe-fonts/source-code-pro
git clone https://github.com/adobe-fonts/source-code-pro.git ~/.fonts/adobe-fonts/source-code-pro
# find ~/.fonts/ -iname '*.ttf' -exec echo \{\} \;
fc-cache -f -v ~/.fonts/adobe-fonts/source-code-pro
echo "finished installing"

eduardocardoso

#!/bin/bash

set -o errexit

echo "Removing exited docker containers..."
docker ps -a -f status=exited -q | xargs -r docker rm -v

echo "Removing dangling images..."
docker images --no-trunc -q -f dangling=true | xargs -r docker rmi

l0ki000

#!/bin/bash
# Cisco Anyconnect CSD wrapper for OpenConnect

# Enter your vpn host here
CSD_HOSTNAME=
if [[ -z ${CSD_HOSTNAME} ]]
then
    echo "Define CSD_HOSTNAME with vpn-host in script text. Exiting."
    exit 1
fi

wumpz

git shortlog -e -s -n

drewfradette

#!/bin/bash
# Filename          catc
# Description       print files to stdout with syntax highlighting (using python-pygments)
# Author            Drew Fradette <http://www.github.com/drewfradette>
# Version           0.6
# Last Updated      2012-09-26
# Usage             catc file.sh
# bash_version      4.2.10(1)-release
#######################################################

turicas

#!/bin/bash
# Convert a MDB file (Access) to SQL
# Needs mdbtools[http://mdbtools.sourceforge.net/]
#  run 'aptitude install mdbtools' on Debian/Ubuntu
# Created by Álvaro Justen <https://github.com/turicas>
# License: GPLv2

mdb=$1
sql=$2

jessykate

module Jekyll
  class MathJaxBlockTag < Liquid::Tag
    def render(context)
      '<script type="math/tex; mode=display">'
    end
  end
class MathJaxInlineTag < Liquid::Tag
    def render(context)
      '<script type="math/tex">'
    end