Re: Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

To: debian-user@lists.debian.org
Subject: Re: Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
From: Roberto C. Sánchez <roberto@debian.org>
Date: Fri, 29 Mar 2024 14:08:00 -0400
Message-id: <[🔎] ZgcDgC5mxG_wQVcR@connexer.com>
Mail-followup-to: Roberto C. Sánchez <roberto@debian.org>, debian-user@lists.debian.org
In-reply-to: <[🔎] CAH8yC8mRnj4QNAWscGRcm=yGhEjSspUbBmPGbBOmOZsDY2zNXQ@mail.gmail.com>
References: <20240329155126.kjjfduxw2yrlxgzm@awork3.anarazel.de> <[🔎] CAH8yC8mRnj4QNAWscGRcm=yGhEjSspUbBmPGbBOmOZsDY2zNXQ@mail.gmail.com>

On Fri, Mar 29, 2024 at 01:52:18PM -0400, Jeffrey Walton wrote:
> Seems relevant since Debian adopted xz about 10 years ago.
> 
Also note that this has been addressed in Debian:
https://lists.debian.org/debian-security-announce/2024/msg00057.html

Provided here for the benefit those who are not subscribed to
debian-security-announce.

Regards,

-Roberto

-- 
Roberto C. Sánchez

Reply to:

References:
- Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
  - From: Jeffrey Walton <noloader@gmail.com>

Prev by Date: Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
Next by Date: Re: making Debian secure by default
Previous by thread: Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
Next by thread: Re: Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
Index(es):
- Date
- Thread