▲ 520 ▼ backdoor in upstream xz/liblzma leading to ssh server compromise (www.openwall.com) submitted 2 years ago by Atemu@lemmy.ml to c/linux@lemmy.ml 96 comments fedilink hide all child comments
[–] kbal@fedia.io 30 points 2 years ago (2 children) The average user? Nothing. Mostly it just affects those who get the newest versions of everything. permalink fedilink source parent hideshow 4 child comments replies: [–] flying_sheep@lemmy.ml 5 points 2 years ago (1 child) In this case I think that's just Fedora and Debian Sid users or so. The backdoor only activates during DEB or RPM builds, and was quickly discovered so only rolling release distros using either package format were affected. permalink fedilink source parent hideshow 2 child comments replies: [–] subtext@lemmy.world 1 point 2 years ago* Not regular Fedora, though, it was only in Fedora Rawhide and Fedora 41, so very very early, bleeding edge distributions. Nothing that a regular Fedora user would be using. https://access.redhat.com/security/cve/cve-2024-3094 E: and Fedora 40 beta which some regular users could conceivably be using https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users permalink fedilink source parent [–] 0xtero@beehaw.org 1 point 2 years ago It mostly affects/targets the build systems of binary distros - infecting their build machines with this would result in complete compromise of released distro down the line. permalink fedilink source parent
[–] flying_sheep@lemmy.ml 5 points 2 years ago (1 child) In this case I think that's just Fedora and Debian Sid users or so. The backdoor only activates during DEB or RPM builds, and was quickly discovered so only rolling release distros using either package format were affected. permalink fedilink source parent hideshow 2 child comments replies: [–] subtext@lemmy.world 1 point 2 years ago* Not regular Fedora, though, it was only in Fedora Rawhide and Fedora 41, so very very early, bleeding edge distributions. Nothing that a regular Fedora user would be using. https://access.redhat.com/security/cve/cve-2024-3094 E: and Fedora 40 beta which some regular users could conceivably be using https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users permalink fedilink source parent
[–] subtext@lemmy.world 1 point 2 years ago* Not regular Fedora, though, it was only in Fedora Rawhide and Fedora 41, so very very early, bleeding edge distributions. Nothing that a regular Fedora user would be using. https://access.redhat.com/security/cve/cve-2024-3094 E: and Fedora 40 beta which some regular users could conceivably be using https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users permalink fedilink source parent
[–] 0xtero@beehaw.org 1 point 2 years ago It mostly affects/targets the build systems of binary distros - infecting their build machines with this would result in complete compromise of released distro down the line. permalink fedilink source parent