Re: XZ Vulnerabillity. Gentoo Immune.

On 2024-03-30, Chris Ahlstrom <OFeem1987@teleworm.us> wrote:

Farley Flud wrote this copyrighted missive and expects royalties:
>

The mainstream GNU/Linux distros are infected with poisoned
XZ code.
>
But Gentoo is totally immune:
>
"Our current understanding of the backdoor is that is does
not affect Gentoo systems, because 1. the backdoor only
appears to be included on specific systems and Gentoo does
not qualify; 2. the backdoor as it is currently understood
targets OpenSSH patched to work with systemd-notify support.
Gentoo does not support or include these patches;"
>
(From the Gentoo Security Database)
>
>
Ha, ha, ha, ha, ha, ha, ha!  That piece of junk systemd
does it again!
>
Brother, unless you are using systemd-free Gentoo, then
you are tremendously sick in the head.
>
Ha, ha, ha, ha, ha, ha, ha!

>
Run "xz --version" and tell us what you see.

In Linux Mint 20.3, 5.2.4. In Linux Mint 21.3, 5.2.5. (The advantage of
non-cutting edge.)

In Fedora 39 before update, 5.4.4. After updated... same.

Fedora kernel now up to 6.7.10-200.

--
[Self-centered, Woke] "pride is a life of self-destructive fakery, an
entrapment to a false and self-created matrix of twisted unreality."
"It was pride that changed angels into devils..."     — St. Augustine