Atemu@lemmy.ml to Linux@lemmy.ml · 1 year agobackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comexternal-linkmessage-square99fedilinkarrow-up1527arrow-down15
arrow-up1522arrow-down1external-linkbackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comAtemu@lemmy.ml to Linux@lemmy.ml · 1 year agomessage-square99fedilink
minus-squarefriend_of_satan@lemmy.worldlinkfedilinkEnglisharrow-up17arrow-down3·1 year agoThe back door is not in the source code though, so it’s not reproducible from source.
minus-squareStatic_Rocket@lemmy.worldlinkfedilinkEnglisharrow-up12·edit-21 year agoPart of the payload was in the tarball. There was still a malicious shim in the upstream repo
The back door is not in the source code though, so it’s not reproducible from source.
Part of the payload was in the tarball. There was still a malicious shim in the upstream repo