Upstreamed backdoor in liblzma/xz: https://www.openwall.com/lists/oss-security/2024/03/29/4
If you're using Tumbleweed/MicroOS/Debian sid and you had ssh exposed to a untrusted network (e.g. "the internet") it's time to re-do your servers.
Big ouchy.
phoenix🐧🏕🏞🚀🍝 /
npub1p9…ymvw5
2024-03-29 19:10:20
Author Public Key
npub1p9kzjxn6juw9qmwchw29w6dmcnja96zj0j0vxhcltvjqssn54rmqtymvw5Published at
2024-03-29 19:10:20Event JSON
{
"id": "a8c315403a7edb074211dd94bffbcc67d2d67c12c3e47552ff1f84703b531d6a",
"pubkey": "096c291a7a971c506dd8bb945769bbc4e5d2e8527c9ec35f1f5b24084274a8f6",
"created_at": 1711739420,
"kind": 1,
"tags": [
[
"proxy",
"https://chaos.social/users/phoenix/statuses/112180554681350601",
"activitypub"
]
],
"content": "Upstreamed backdoor in liblzma/xz: https://www.openwall.com/lists/oss-security/2024/03/29/4\n\nIf you're using Tumbleweed/MicroOS/Debian sid and you had ssh exposed to a untrusted network (e.g. \"the internet\") it's time to re-do your servers.\n\nBig ouchy.",
"sig": "2065478ff10daf7bd563ab536abba2ed8be6a7e5da193f7cb2f7c1bc1d559200c8c8127c612d5e8fe13a1a9fafcc73ce6eb6ca1187b53636c19752137221644e"
}