jeff via plug on 2 Apr 2024 11:20:13 -0700
|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
- From: jeff via plug <plug@lists.phillylinux.org>
- To: Philadelphia Linux User's Group Discussion List <plug@lists.phillylinux.org>
- Subject: [PLUG] XZ scanner
- Date: Tue, 2 Apr 2024 14:20:07 -0400
- Authentication-results: smtp04.aqua.email-ash1.sync.lan smtp.user=<hidden>; auth=pass (LOGIN)
- Dkim-signature: v=1; a=rsa-sha1; d=op.net; s=20180222; c=relaxed/simple; q=dns/txt; i=@op.net; t=1712082007; h=From:Subject:Date:To:MIME-Version:Content-Type; bh=aZjJzY3YUGVZfOQ8CtWAdbN2af8=; b=rSaEseUtK88CK0NUMfD/v3G9xp9v2mYlGKaF/eV5ZC7WbPsNGzneasEWaR2pS0W3 ZCp46O57rYvOex3pB26NX+wgx/YicjdtlWMpX3kdw2LGPslWRlZNVr0Kd11N42cd 7YUxHBcz3f+34JhI04OBW0LEJwQoy5tukMrE9W907AWMpKQw+yCkGrDn5pEbW0KG KwL0NFZT9vsyL0zEe17nJDJilhoW+h42KZTQP6OLDznJjkf4LTnd1v4HjqCtSWbt o5J9NTUDcQP4Q3DRza9k+KLZb8Cx6WujUGycUOpDrWiofvuDkMzXXSbTSRTqODs+ pv/TovNTReOeFlxKRuipiQ==;
- Reply-to: jeff <jeffv@op.net>
- Sender: "plug" <plug-bounces@lists.phillylinux.org>
- User-agent: Mozilla Thunderbird
New XZ backdoor scanner detects implant in any Linux binary
https://www.bleepingcomputer.com/news/security/new-xz-backdoor-scanner-detects-implant-in-any-linux-binary/
Firmware security firm Binarly has released a free online scanner to
detect Linux executables impacted by the XZ Utils supply chain attack,
tracked as CVE-2024-3094.
CVE-2024-3094 is a supply chain compromise in XZ Utils, a set of data
compression tools and libraries used in many major Linux distributions.
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug