Re: Malware find in the news: xz related.

On 31.03.2024 um 14:25 Uhr Grant Taylor wrote:

N.B. there is a big difference in saying that *BSD / Slackware /
Gentoo (OpenRC) aren't effected by the topic at hand because they
aren't using systemd and saying that they are obviously more secure
because they aren't vulnerable to the topic at hand.

They are not affected because the author of the backdoor maybe intended
to only affect sshd linked to xz or simply forgot that there are
systems that won't be affected by the back door.
Linux distributions with systemd are now the vast majority, so maybe
the author didn't care about some Gentoo or slackware machines.

If he liked, he could affect them too because they most likely have
liblzma installed for other purposes. Although, sshd could be affected,
but various other packages could be if the author intended to do that.

--
kind regards
Marco

Send spam to 1711887955muell@cartoonies.org