Puppy Linux Discussion Forum

Discussion, talk and tips
https://www.forum.puppylinux.com/

xz compression library v 5.60 & 5.61 have been backdoored - SSH compromised

https://www.forum.puppylinux.com/viewtopic.php?t=11108

Page 1 of 1

xz compression library v 5.60 & 5.61 have been backdoored - SSH compromised

Posted: Fri Mar 29, 2024 10:36 pm
by dogcat

https://archlinux.org/news/the-xz-packa ... ackdoored/

(5.60 was released 24 Feb, 2024)

Re: xz compression library v 5.60 & 5.61 have been backdoored

Posted: Sat Mar 30, 2024 12:16 am
by rockedge

Void Linux has removed it upstream and replaced with 5,4 today!

Re: xz compression library v 5.60 & 5.61 have been backdoored

Posted: Sat Mar 30, 2024 2:14 am
by geo_c
rockedge wrote: ↑Sat Mar 30, 2024 12:16 am

Void Linux has removed it upstream and replaced with 5,4 today!

Wow, so does this run only if a compression command is used? I guess I should do a system update.

Re: xz compression library v 5.60 & 5.61 have been backdoored

Posted: Sat Mar 30, 2024 2:28 am
by geo_c

Here's some info on it: https://arstechnica.com/security/2024/0 ... nnections/

All times are UTC
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited