Skip to content

Commit

Permalink
Don't duplicate fr0gger diagram
Browse files Browse the repository at this point in the history
  • Loading branch information
robertdfrench committed Jul 25, 2024
1 parent 4eb5509 commit f055384
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,9 +24,10 @@ of dynamic linking on Linux. If you need a refresher, check out
## Quick Recap of CVE-2024-3094
There are tons of good writeups outlining the high level details of the
xz-utils backdoor, like Dan Goodin's [What we know about the xz Utils
backdoor that almost infected the world][goodin1] and Thomas Roccia's
[XZ Outbreak][fr0gger] diagram. We don't need to rehash all that here,
so the purposes of this article, here is a **very coarse** recap:
backdoor that almost infected the world][goodin1] and Sam James' [FAQ on
the xz-utils backdoor (CVE-2024-3094)][thesamesam] gist. We don't need
to rehash all that here, so the purposes of this article, here is a
**very coarse** recap:

* Some Linux distros modify OpenSSH to depend on SystemD
* SystemD depends on xz-utils, which uses GNU IFUNC
Expand Down

0 comments on commit f055384

Please sign in to comment.