288
Backdoor found in widely used Linux utility breaks encrypted SSH connections | Ars Technica (arstechnica.com)
submitted 2 years ago by to c/privacy@lemmy.ml
42 comments fedilink hide all child comments
 

TL;DR there was a backdoor found in the XZ program. All major distros have been updated but it is recommended that you do a fresh install on systems that are exposed to the internet and that had the bad version of the program. Only upstream distros were affected.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 years ago

The reason openssh links liblzma in the first place is to enable a systemd feature, so naturally "systemd bad, it's proximity to a security issue is yet more proof that a pile of shell scripts in a trenchcoat is a superior init system" etc

  • permalink
  • fedilink
  • source
  • parent