Russ Cox personal blog

The xz attack shell script

Andres Freund published the existence of the xz attack on 2024-03-29 to the public oss-security@openwall mailing list. The day before, he alerted Debian security and the (private) distros@openwall list. In his mail, he says that he dug into this after “observing a few odd symptoms around liblzma (part of the xz…
Points
606
HN comments
313
Submissions
1
Cited by
6 commenters

Security & PrivacyOpen Source2024

On Hacker News

SubmittedTitle on HNPointsComments
Apr 2, 2024The xz attack shell script by todsacerdoti606313

Cited in comments

Linked from 6 Hacker News comments by 6 different people, from Apr 2024 to Oct 2025.

Most recent:

Search every comment that links here →

More from Russ Cox

All 43 posts →

Related posts from the same era