View of Trust but Verify: The xz-utils Backdoor (CVE-2024-3094) and the Foundations of Open-Source Software Supply-Chain Trust

Return to Issue Details Trust but Verify: The xz-utils Backdoor (CVE-2024-3094) and the Foundations of Open-Source Software Supply-Chain Trust Download Download PDF