Skip Navigation

Programming @programming.dev

canpolat @programming.dev

1y ago

What we know about the xz Utils backdoor that almost infected the world

arstechnica.com What we know about the xz Utils backdoor that almost infected the world

Malicious updates made to a ubiquitous tool were a few weeks away from going mainstream.

What we know about the xz Utils backdoor that almost infected the world

Hacker News @lemmy.smeargle.fans

What we know about the xz Utils backdoor that almost infected the world

arstechnica.com /security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/

What we know about the xz Utils backdoor that almost infected the world

2 0

Security @programming.dev

What we know about the xz Utils backdoor that almost infected the world

arstechnica.com /security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/

What we know about the xz Utils backdoor that almost infected the world

34 0

You're viewing a single thread.

35 comments

So if I don't use SSH am I fine? Because my distro doesn't let me remove the package. Other packages depend on it.
- Unless you're running Debian testing you're safe. If ssh isn't open to the internet you're safe. Just make sure everything is up-to-date.
  
  Debian testing has 'updated' to 5.6.1+really5.4.5-1 anyway, so as long as you've updated within the past few days it will have been downgraded to 5.4.5.
- You can't remove it but you can downgrade.

35 comments