https://archlinux.org/news/the-xz-packa ... ackdoored/
(5.60 was released 24 Feb, 2024)
xz compression library v 5.60 & 5.61 have been backdoored - SSH compromised
-
rockedge
- Site Admin
- Posts: 6551
- Joined: Mon Dec 02, 2019 1:38 am
- Location: Connecticut,U.S.A.
- Has thanked: 2757 times
- Been thanked: 2627 times
- Contact:
Re: xz compression library v 5.60 & 5.61 have been backdoored
Void Linux has removed it upstream and replaced with 5,4 today!
-
geo_c
- Posts: 2881
- Joined: Fri Jul 31, 2020 3:37 am
- Has thanked: 2204 times
- Been thanked: 878 times
Re: xz compression library v 5.60 & 5.61 have been backdoored
Wow, so does this run only if a compression command is used? I guess I should do a system update.
geo_c
Old School Hipster, and Such
-
geo_c
- Posts: 2881
- Joined: Fri Jul 31, 2020 3:37 am
- Has thanked: 2204 times
- Been thanked: 878 times
Re: xz compression library v 5.60 & 5.61 have been backdoored
Here's some info on it: https://arstechnica.com/security/2024/0 ... nnections/
geo_c
Old School Hipster, and Such