xz package is severely affected with injected code in some linux distributions.
#1
xz package is severely affected with injected code in some linux distributions.

xz library in this case can infect sshd, ssh server. we probably know details later, but ssh server is compromised somehow. and it is not known how this vulnerability is used in the wild.

upgrade or downgrade depending on a distribution asap.

https://lists.debian.org/debian-security...00057.html

https://www.openwall.com/lists/oss-secur...24/03/29/4

https://www.redhat.com/en/blog/urgent-se...hide-users

https://infosec.exchange/@kalilinux/112180505434870941
  Reply


Messages In This Thread
xz package is severely affected with injected code in some linux distributions. - by zetabeta - 03-29-2024, 02:57 PM

Possibly Related Threads…
Thread Author Replies Views Last Post
  Has anyone successfully flashed an Ox64 (128Mb) from linux? slondr 3 2,260 02-12-2024, 12:50 AM
Last Post: Pavlos1
  [Article] Ox64 BL808 RISC-V SBC: Booting Linux and (maybe) Apache NuttX RTOS lupyuen 2 1,008 11-04-2023, 08:41 PM
Last Post: lupyuen
  Possible new Pine64 product - Pine Blue Ray DVD Linux tv box Omnios 5 1,804 07-24-2023, 03:21 PM
Last Post: Omnios
  [Article] Booting RISC-V Linux on Star64 JH7110 SBC lupyuen 3 1,714 07-05-2023, 02:04 AM
Last Post: balbes150
  [Article] Inspecting the RISC-V Linux Images for Star64 SBC lupyuen 3 1,547 06-29-2023, 05:09 AM
Last Post: balbes150
  Concerns about Linux future Chief 15 7,088 01-20-2023, 05:23 AM
Last Post: thaleszop
  Online Linux Terminals palak231 1 1,072 09-13-2022, 01:50 PM
Last Post: anonymous
  Linux desktop on a Snapdragon 870 phone. Vasant 0 1,332 06-23-2022, 12:40 PM
Last Post: Vasant
  Linux support for RK3588 adiboc 0 3,497 02-10-2022, 01:16 PM
Last Post: adiboc
  Linux vs NetBSD NIS passwords KC9UDX 20 17,705 08-19-2021, 02:20 AM
Last Post: Gribouille

Forum Jump:


Users browsing this thread: 1 Guest(s)