Fedora Rawhide News Today

April 2024 is now in the books after writing 257 original Linux/open-source-related news articles and another 13 featured articles / Linux hardware reviews

A foiled attempt to subvert a widely used software utility is raising critical questions across D.C. about the vulnerability of the open-source supply chain -- and to what extent

Release of the latest Ubuntu beta pushed back following security alerts

Binarly has issued a free online tool that would facilitate scanning a newly discovered backdoor and maximum severity vulnerability in xz tools and libraries used by major Linux distributions, tracked as CVE-2024-3094, across Linux binaries amid significant security risks, according to Security Affairs.

A maintainer for a Linux-based database identified malicious code hidden in a tool called XZ Utils and stopped a global security breach in its tracks.

The Ubuntu 24.04 beta has been delayed for a week due to malicious code in the xz-utils package. Updates and fixes are being worked on.

A backdoor that seems to have been purposely placed in the open source XZ Utils data compression library could have led to widespread compromise across the Linux ecosystem, and the community is on the trail of an individual developer who seems to be behind it.

Linux was hit with a serious supply chain attack involving XZ Utils, a set of tools and libraries most Linux distros use for data compression.

Microsoft software engineer Andres Freund discovers a backdoor lurking in the XZ Utils data-compression tools, which are open source and widely used across Linux distributions.

Nation-state attackers apparently backdoored widely used, open-source data compression software as part of a supply chain attack. Malicious code inserted into