120
Backdoor found in widely used Linux utility breaks encrypted SSH connections | Ars Technica (arstechnica.com)
submitted 2 years ago by to c/sysadmin@lemmy.world
8 comments fedilink hide all child comments
 

Hopefully this does not affect you but if you are running something like Arch, OpenSUSE tumbleweed, Debian sid or Fedora Rawhide and use SSH for remote access you should do a full wipe.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (1 child)

That's not correct as far as I can tell. The backdoored code ended up in release tarballs (but not source tarballs because of autoconf fuckery), see eg. this mailing list discussion.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •