xz package is severely affected with injected code in some linux distributions.
#1
xz package is severely affected with injected code in some linux distributions.

xz library in this case can infect sshd, ssh server. we probably know details later, but ssh server is compromised somehow. and it is not known how this vulnerability is used in the wild.

upgrade or downgrade depending on a distribution asap.

https://lists.debian.org/debian-security...00057.html

https://www.openwall.com/lists/oss-secur...24/03/29/4

https://www.redhat.com/en/blog/urgent-se...hide-users

https://infosec.exchange/@kalilinux/112180505434870941
  Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Has anyone successfully flashed an Ox64 (128Mb) from linux? slondr 3 2,304 02-12-2024, 12:50 AM
Last Post: Pavlos1
  [Article] Ox64 BL808 RISC-V SBC: Booting Linux and (maybe) Apache NuttX RTOS lupyuen 2 1,015 11-04-2023, 08:41 PM
Last Post: lupyuen
  Possible new Pine64 product - Pine Blue Ray DVD Linux tv box Omnios 5 1,832 07-24-2023, 03:21 PM
Last Post: Omnios
  [Article] Booting RISC-V Linux on Star64 JH7110 SBC lupyuen 3 1,732 07-05-2023, 02:04 AM
Last Post: balbes150
  [Article] Inspecting the RISC-V Linux Images for Star64 SBC lupyuen 3 1,565 06-29-2023, 05:09 AM
Last Post: balbes150
  Concerns about Linux future Chief 15 7,224 01-20-2023, 05:23 AM
Last Post: thaleszop
  Online Linux Terminals palak231 1 1,088 09-13-2022, 01:50 PM
Last Post: anonymous
  Linux desktop on a Snapdragon 870 phone. Vasant 0 1,348 06-23-2022, 12:40 PM
Last Post: Vasant
  Linux support for RK3588 adiboc 0 3,519 02-10-2022, 01:16 PM
Last Post: adiboc
  Linux vs NetBSD NIS passwords KC9UDX 20 17,797 08-19-2021, 02:20 AM
Last Post: Gribouille

Forum Jump:


Users browsing this thread: 1 Guest(s)