CVE-2024-3094

XZ Utils Data Compression Library

A vulnerability (CVE-2024-3094) in XZ Utils, the XZ format compression utilities included in most Linux distributions, may “enable a malicious actor to break sshd authentication and gain unauthorized access to the entire system remotely,” Red Hat warns.

Resources:

NVD - CVE-2024-3094

oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise

Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094) - Help Net SecurityHelp Net Security