XZ Utils Backdoor (CVE-2024-3094): A Supply Chain Post-Mortem

A near-miss that would have put a backdoor in sshd across major Linux distributions, undone by a curious engineer noticing sshd was 500ms slower.

2024-04-05 · 4 min · 665 words · lcz