@ngn@lemy.lol to Memes@lemmy.mlEnglish • 1 year agolove is in the air?lemy.lolimagemessage-square42fedilinkarrow-up10arrow-down10
arrow-up10arrow-down1imagelove is in the air?lemy.lol@ngn@lemy.lol to Memes@lemmy.mlEnglish • 1 year agomessage-square42fedilink
minus-square@wildbus8979@sh.itjust.workslinkfedilink0•1 year agohttps://archlinux.org/news/the-xz-package-has-been-backdoored/
minus-square@30p87@feddit.delinkfedilink0•1 year agoAnd as https://www.openwall.com/lists/oss-security/2024/03/29/4 says: “These conditions include targeting only x86-64 linux: […] Building with gcc and the gnu linker […] Running as part of a debian or RPM package build:” I’m not an expert of course.
minus-squarebrvslvrnstlinkfedilink0•1 year agoHoly shit that was a hell of a dive. And no wonder the dude got it working, he was just pounding those “test and translation” commits
minus-square@HopFlop@discuss.tchncs.delinkfedilink0•1 year agoYeah but the backdoor does not work on Arch (as far as we currently know). It relies on a linking of libraries that Arch doesnt do by default.
https://archlinux.org/news/the-xz-package-has-been-backdoored/
And as https://www.openwall.com/lists/oss-security/2024/03/29/4 says:
“These conditions include targeting only x86-64 linux: […] Building with gcc and the gnu linker […] Running as part of a debian or RPM package build:”
I’m not an expert of course.
Holy shit that was a hell of a dive. And no wonder the dude got it working, he was just pounding those “test and translation” commits
Yeah but the backdoor does not work on Arch (as far as we currently know). It relies on a linking of libraries that Arch doesnt do by default.