Discover gists

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

Pure ESM package

The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.

This means you have the following choices:

Use ESM yourself. (preferred)
Use import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.
If the package is used in an async context, you could use await import(…) from CommonJS instead of require(…).
Stay on the existing version of the package until you can move to ESM.

robots.txt file controls what pages of your allplications gets crawled by the serach engine bots. As part of robots.txt file we can allow or disallow single pages or directories within the application.

robots.txt file lives in the root folder of your application. A simple, static solution in Rails would be, to put a robots.txt file into you /public folder in your rails app but then you can't dynamically set the content of this file.

If you want a different file for staging and production server or want some dynamic routes in your robots.txt, then you need to generate this file with rails. Make sure you remove/rename robots.txt from /public folder.

	#!/usr/bin/env bash

	# Abort sign off on any error
	set -e

	# Start the benchmark timer
	SECONDS=0

	# Repository introspection
	OWNER=$(gh repo view --json owner --jq .owner.login)

	# Based on this answer: https://stackoverflow.com/a/61859561/1956278

	# Backup old data
	Rename-Item -Path "./data" -NewName "./data_old"

	# Create new data directory
	Copy-Item -Path "./backup" -Destination "./data" -Recurse
	Remove-Item "./data/test" -Recurse
	$dbPaths = Get-ChildItem -Path "./data_old" -Exclude ('mysql', 'performance_schema', 'phpmyadmin') -Recurse -Directory
	Copy-Item -Path $dbPaths.FullName -Destination "./data" -Recurse

	using UnityEngine;
	#if UNITY_EDITOR
	using UnityEditor;
	#endif

	[System.Serializable]
	public class SceneObject
	{
	[SerializeField]
	private string m_SceneName;

	using System.Collections.Generic;
	using UnityEngine;
	using UnityEngine.UIElements;
	using UnityEngine.EventSystems;
	using UnityEngine.Rendering;

	namespace Katas.Experimental
	{
	public class WorldSpaceUIDocument : MonoBehaviour, IPointerMoveHandler, IPointerUpHandler, IPointerDownHandler,
	ISubmitHandler, ICancelHandler, IMoveHandler, IScrollHandler, ISelectHandler, IDeselectHandler, IDragHandler

	using Microsoft.AspNetCore.Builder;
	using Microsoft.AspNetCore.Hosting;
	using Microsoft.EntityFrameworkCore.Infrastructure;
	using Microsoft.Extensions.Configuration;
	using Microsoft.Extensions.DependencyInjection;
	using Microsoft.Extensions.Logging;
	using Microsoft.AspNetCore.Identity.EntityFrameworkCore;
	using Microsoft.EntityFrameworkCore;

	namespace MyApp.Api

	#!/bin/bash
	#
	# Template-O-Matic
	# Converts between Gitpod and CodeAnywhere templates
	#
	# Niel McEwen & Matt Rudge, 2024

	cafolder=".devcontainer"
	gitpodfolder=".vscode"
	ide="Gitpod"