DevMiner TheDevMinerTV

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

To remove a submodule you need to:

Delete the relevant section from the .gitmodules file.
Stage the .gitmodules changes git add .gitmodules
Delete the relevant section from .git/config.
Run git rm --cached path_to_submodule (no trailing slash).
Run rm -rf .git/modules/path_to_submodule (no trailing slash).
Commit git commit -m "Removed submodule "
Delete the now untracked submodule files rm -rf path_to_submodule

THIS GIST WAS MOVED TO TERMSTANDARD/COLORS REPOSITORY.

PLEASE ASK YOUR QUESTIONS OR ADD ANY SUGGESTIONS AS A REPOSITORY ISSUES OR PULL REQUESTS INSTEAD!

	import { useEffect, useState } from 'react';
	import { PopoverContent, PopoverTrigger } from '../primitives/ui/popover';
	import { Popover } from '../primitives/ui/popover';
	import { BsCardHeading } from 'react-icons/bs';
	import { Button } from '~ui/components/primitives/ui/button';
	import { FiAlertCircle } from 'react-icons/fi';
	import { TbAlertCircleFilled } from 'react-icons/tb';
	type HeadValues = {
	title?: string;
	canonical?: string;

	#!/bin/bash

	#
	# MOVED TO https://github.com/TheDevMinerTV/sh.devminer.xyz/blob/master/scripts/copy_ssh_keys.sh
	#

	# You can use this script to copy all public keys from your local machine to multiple remote machines.
	#
	# Usage: ./copy_ssh_keys.sh <non-root username> <own public key> <folder with pub keys> <host1> [host2]...
	#

	{
	"Command": "skin",
	"Skins": [
	{
	"Item Shortname": "fun.guitar",
	"Skins": [
	0,
	809801196,
	826914904,
	809938266,

	#!/bin/bash

	IMAGE="gcr.io/google-containers/ubuntu-slim:0.14"
	COMMAND="/bin/bash"
	SUFFIX=$(date +%s \| shasum \| base64 \| fold -w 10 \| head -1 \| tr '[:upper:]' '[:lower:]')

	usage_exit() {
	echo "Usage: $0 [-c command] [-i image] PVC ..." 1>&2
	exit 1
	}

	image: golang:latest

	variables:
	REPO_NAME: gitlab.com/*/*

	before_script:
	- go version
	- echo $CI_BUILD_REF
	- echo $CI_PROJECT_DIR