xz package is severely affected with injected code in some linux distributions.

xz package is severely affected with injected code in some linux distributions.

zetabeta
Pine Scholar

Joined: Jul 2020

Posts: 524

Reputation: 52

03-29-2024, 02:57 PM

xz package is severely affected with injected code in some linux distributions.

xz library in this case can infect sshd, ssh server. we probably know details later, but ssh server is compromised somehow. and it is not known how this vulnerability is used in the wild.

upgrade or downgrade depending on a distribution asap.

https://lists.debian.org/debian-security...00057.html

https://www.openwall.com/lists/oss-secur...24/03/29/4

https://www.redhat.com/en/blog/urgent-se...hide-users

https://infosec.exchange/@kalilinux/112180505434870941

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	Manjaro affected by Arch supply chain rootkit	tantamount	0	590	06-28-2026, 10:45 AM Last Post: tantamount
	Has anyone installed Trisquel (linux-libre) on Pine64 RockPro64?	libreboy	1	4,060	11-03-2025, 12:08 PM Last Post: RandB
	[article] Linux Phone Takeover	Juergen	4	6,173	10-08-2025, 02:31 PM Last Post: zech.dexos
	Is the Linux mobile phone still developing?	CleanEnvironment	5	5,139	08-07-2024, 06:25 PM Last Post: KC9UDX
	Has anyone successfully flashed an Ox64 (128Mb) from linux?	slondr	3	6,689	02-12-2024, 12:50 AM Last Post: Pavlos1
	[Article] Ox64 BL808 RISC-V SBC: Booting Linux and (maybe) Apache NuttX RTOS	lupyuen	2	4,126	11-04-2023, 08:41 PM Last Post: lupyuen
	Possible new Pine64 product - Pine Blue Ray DVD Linux tv box	Omnios	5	6,351	07-24-2023, 03:21 PM Last Post: Omnios
	[Article] Booting RISC-V Linux on Star64 JH7110 SBC	lupyuen	3	6,099	07-05-2023, 02:04 AM Last Post: balbes150
	[Article] Inspecting the RISC-V Linux Images for Star64 SBC	lupyuen	3	5,702	06-29-2023, 05:09 AM Last Post: balbes150
	Concerns about Linux future	Chief	15	17,885	01-20-2023, 05:23 AM Last Post: thaleszop

Forum Jump:

Users browsing this thread: 1 Guest(s)

About Us