Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise

To: debian-user@lists.debian.org
Subject: Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
From: Michel Verdier <mv524@free.fr>
Date: Sat, 30 Mar 2024 22:24:49 +0100
Message-id: <[🔎] 87sf07v2hr.fsf@free.fr>
In-reply-to: <[🔎] 4o4p7qs4-o310-qr95-55s-4r0r7o4594q@cebgbaznvy.pbz> (fxkl47BF's message of "Sat, 30 Mar 2024 20:57:14 +0000")
References: <20240329155126.kjjfduxw2yrlxgzm@awork3.anarazel.de> <[🔎] CAH8yC8mRnj4QNAWscGRcm=yGhEjSspUbBmPGbBOmOZsDY2zNXQ@mail.gmail.com> <[🔎] CAH8yC8kv+PODv-qef8QFAp7KHWoB0=XXfx6UzyJX5udbEsyEVg@mail.gmail.com> <[🔎] 4o4p7qs4-o310-qr95-55s-4r0r7o4594q@cebgbaznvy.pbz>

On 2024-03-30, fxkl47BF@protonmail.com wrote:

> so is this a threat to us normal debian users
> if so how do we fix it

Debian stable is not affected, Debian testing, unstable and
experimental must be updated.

https://lists.debian.org/debian-security-announce/2024/msg00057.html

Reply to:

References:
- Fwd: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
  - From: Jeffrey Walton <noloader@gmail.com>
- Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
  - From: Jeffrey Walton <noloader@gmail.com>
- Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
  - From: fxkl47BF@protonmail.com

Prev by Date: Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
Next by Date: Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
Previous by thread: Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
Next by thread: Re: [oss-security] backdoor in upstream xz/liblzma leading to ssh server compromise
Index(es):
- Date
- Thread