News and Notes from the Makers of Nexus | Sonatype Blog

CVE-2024-3094 The targeted backdoor supply chain attack against XZ and liblzma

By Ilkka Turunen on April 01, 2024 Software Supply Chain

Learn about a new, targeted backdoor supply chain attack against the popular XZ compression utility seen in many Linux distributions such as fedora and debian. Understand its impact, potential risks

4 minute read time

Tyro recently empowered their developers to build more secure software by instituting time-based waivers.

CVE-2024-3094 The targeted backdoor supply chain attack against XZ and liblzma

Empowering Developers: Security Self Serve and Automated Time-Based Waivers

Secure your software supply chain

Subscribe for all the latest software security news and events