+17
This past week,
A firmware security firm, Binarly, has since created a FREE online “scanner” to detect Linux executables impacted by the XZ Utils supply chain attack. You can read more details about the logic behind the scanner as well as download links from the article below:
Best.
+20
That was quite the vulnerability and great to see someone coming up with something like this to scan for it. Going to check it out and pass it along.
+6
My understanding is that most people will not yet be on this version of XZ Utils. Indeed, my machines were much older. I used the below command to grab the version from my Ubuntu boxes as referenced here. Great to find a scanning tool as well...thanks for sharing Shane!
dpkg-query -l '*xz*'
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
