XZ Utils

Mentions · 7d0
Mentions · 30d1
All mentions3
First seenSep 9, 2026
Last mentioned19d ago

Timeline

3 articles · newest first

XZ Utils mishandles decoder memory failures, risking code execution

Ubuntu's USN-8945-1 says a bad write during decoder reinitialization could cause denial of service or arbitrary code execution.

Ubuntu Security NoticesOct 20, 17:45 UTC · 19d agoVulnerability1

OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One

Profile of OpenSSH creator Theo de Raadt, whose OpenBSD design stayed outside the 2024 xz backdoor.

Hacker News · securityOct 5, 19:25 UTC · Oct 5, 2026Industry HN 20 points · 8 comments5

Fwd: XZ Utils 5.8.4 and a security fix

XZ Utils 5.8.4 fixes an invalid memory write that occurs when a decoder is reinitialized after allocation failure in 5.8.3 and older.

oss-securitySep 9, 18:28 UTC · Sep 9, 2026Vulnerability1

Appears with

Debianorganization · 1
Tukaaniorganization · 1
OpenBSDproduct · 1
liblzmaproduct · 1
DARPAorganization · 1
Microsoftvendor · 1
NetBSDorganization · 1
XZ Utils backdoormalware · 1
Jia Tanthreat actor · 1
OpenSSHproduct · 1
Red Hatvendor · 1
XZ Utilsvendor · 1
Ubuntuorganization · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned 19d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.