Silver's Home
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
Atemu to Linux@lemmy.ml • 1 year ago

backdoor in upstream xz/liblzma leading to ssh server compromise

www.openwall.com

message-square
128
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
  • programming@programming.dev
522
external-link

backdoor in upstream xz/liblzma leading to ssh server compromise

www.openwall.com

Atemu to Linux@lemmy.ml • 1 year ago
message-square
128
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
  • programming@programming.dev
  • @flying_sheep@lemmy.ml
    link
    fedilink
    5•1 year ago

    In this case I think that’s just Fedora and Debian Sid users or so.

    The backdoor only activates during DEB or RPM builds, and was quickly discovered so only rolling release distros using either package format were affected.

    • @subtext@lemmy.world
      link
      fedilink
      1•
      edit-2
      1 year ago

      Not regular Fedora, though, it was only in Fedora Rawhide and Fedora 41, so very very early, bleeding edge distributions. Nothing that a regular Fedora user would be using.

      https://access.redhat.com/security/cve/cve-2024-3094

      E: and Fedora 40 beta which some regular users could conceivably be using

      https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users

Linux@lemmy.ml

!linux@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@lemmy.ml

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

  • Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
  • No misinformation
  • No NSFW content
  • No hate speech, bigotry, etc

Related Communities

  • !opensource@lemmy.ml
  • !libre_culture@lemmy.ml
  • !technology@lemmy.ml
  • !libre_hardware@lemmy.ml

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

  • 877 users / day
  • 3.57K users / week
  • 8.36K users / month
  • 17.7K users / 6 months
  • 54.1K subscribers
  • 7.27K Posts
  • 184K Comments
  • Modlog
  • mods:
  • @AgreeableLandscape@lemmy.ml
  • @nooter692@lemmy.ml
  • @MarcellusDrum@lemmy.ml
  • Arthur Besse
  • Cyclohexane
  • @d3Xt3r@lemmy.nz
  • BE: 0.19.3
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org