mox@lemmy.sdf.org to Selfhosted@lemmy.worldEnglish · edit-29 months agoBackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comexternal-linkmessage-square9fedilinkarrow-up1176file-textcross-posted to: netsec@links.hackliberty.orglinux@lemmy.worldprogramming@programming.devhackernews@lemmy.smeargle.fanssecurity@lemmy.mllinux@lemmy.ml
arrow-up1176external-linkBackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.commox@lemmy.sdf.org to Selfhosted@lemmy.worldEnglish · edit-29 months agomessage-square9fedilinkfile-textcross-posted to: netsec@links.hackliberty.orglinux@lemmy.worldprogramming@programming.devhackernews@lemmy.smeargle.fanssecurity@lemmy.mllinux@lemmy.ml
Related discussion: https://news.ycombinator.com/item?id=39865810 https://news.ycombinator.com/item?id=39877267 Advisories: CVE-2024-3094 Arch Debian openSUSE Red Hat
minus-squareTeppic@kbin.sociallinkfedilinkarrow-up5·9 months agoA good summary here: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/
A good summary here: https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/