XZ Utils mishandles decoder memory failures, risking code execution
Ubuntu's USN-8945-1 says a bad write during decoder reinitialization could cause denial of service or arbitrary code execution.
3 stories, newest first · one card per story
Ubuntu's USN-8945-1 says a bad write during decoder reinitialization could cause denial of service or arbitrary code execution.

Profile of OpenSSH creator Theo de Raadt, whose OpenBSD design stayed outside the 2024 xz backdoor.
XZ Utils 5.8.4 fixes an invalid memory write that occurs when a decoder is reinitialized after allocation failure in 5.8.3 and older.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views