Atemu to [email protected] • 2 months agobackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.commessage-square95fedilinkarrow-up1492arrow-down15cross-posted to: [email protected][email protected]selfhostedlinuxnetsec[email protected][email protected][email protected][email protected]
arrow-up1487arrow-down1external-linkbackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comAtemu to [email protected] • 2 months agomessage-square95fedilinkcross-posted to: [email protected][email protected]selfhostedlinuxnetsec[email protected][email protected][email protected][email protected]
minus-square@friend_of_satanlinkEnglish13•2 months agoThe back door is not in the source code though, so it’s not reproducible from source.
minus-square@Static_RocketlinkEnglish12•edit-22 months agoPart of the payload was in the tarball. There was still a malicious shim in the upstream repo
The back door is not in the source code though, so it’s not reproducible from source.
Part of the payload was in the tarball. There was still a malicious shim in the upstream repo