{"description":"Julia Discourse\u306e\u6700\u65b0\u8a18\u4e8b\u3092\u305a\u3089\uff5e\u3063\u3068\u773a\u3081\u3066\u3044\u3066\u6c17\u4ed8\u3044\u305f\u306e\u3060\u304c\uff0c xz-utils\u306e\u30d0\u30fc\u30b8\u30e7\u30f35.6.0, 5.6.1\u306etarball\u306b\u542b\u307e\u308c\u308b\u30d0\u30a4\u30ca\u30ea\u306b\u30d0\u30c3\u30af\u30c9\u30a2\u304c\u3057\u304b\u3051\u3089\u308c\u3066\u3044\u305f\u305d\u3046\u3060\u3002 PSA: backdoor in xz-utils and relevance for the Julia ecosystem\u304c\u305d\u306e\u5185\u5bb9\u3002 \u624b\u5143\u3067artifacts\u306e\u4e2d\u306b\u3082\u8a72\u5f53\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5165\u3063\u3066\u3044\u3066\uff0c\u65e9\u901f\u30d5\u30a9\u30eb\u30c0\u3054\u3068\u524a\u9664\u3002 \u307e\u305f\uff0cXZ_jll\u30825.6.1\u306f\u524a\u9664\u3002 \u305f\u3060\u4f9d\u5b58\u3057\u3066\u3044\u308b\u306e\u306f\uff0ctoml\u30d5\u30a1\u30a4\u30eb\u3067grep\u3092\u304b\u3051\u3066\u3082ChainRulesCore.jl \u306edocs/Manifest.tom\u2026","published":"2024-03-31 18:49:14","author_name":"ujimushisradjp","provider_name":"Hatena Blog","width":"100%","author_url":"https://blog.hatena.ne.jp/ujimushisradjp/","title":"xz-utils(v 5.6.0, v5.6.1)\u306b\u30d0\u30c3\u30af\u30c9\u30a2\u306e\u8106\u5f31\u6027","url":"https://ujimushisradjp.hatenablog.jp/entry/2024/03/31/184914","height":"190","blog_url":"https://ujimushisradjp.hatenablog.jp/","version":"1.0","blog_title":"ujimushi(@\u65e7sradjp(15364))\u306e\u65e5\u8a18","image_url":null,"provider_url":"https://hatena.blog","categories":["Julia\u8a00\u8a9e","\u96d1\u611f"],"type":"rich","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fujimushisradjp.hatenablog.jp%2Fentry%2F2024%2F03%2F31%2F184914\" title=\"xz-utils(v 5.6.0, v5.6.1)\u306b\u30d0\u30c3\u30af\u30c9\u30a2\u306e\u8106\u5f31\u6027 - ujimushi(@\u65e7sradjp(15364))\u306e\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>"}