Sujet : Re: Malware find in the news: xz related.
De : robin_listas (at) *nospam* es.invalid (Carlos E.R.)
Groupes : comp.os.linux.miscDate : 07. Apr 2024, 15:05:02
Autres entêtes
Message-ID : <eplaekx4iu.ln2@Telcontar.valinor>
References : 1 2 3 4 5 6
User-Agent : Mozilla Thunderbird
On 2024-04-01 10:44, Marco Moock wrote:
On 31.03.2024 um 14:25 Uhr Grant Taylor wrote:
N.B. there is a big difference in saying that *BSD / Slackware /
Gentoo (OpenRC) aren't effected by the topic at hand because they
aren't using systemd and saying that they are obviously more secure
because they aren't vulnerable to the topic at hand.
They are not affected because the author of the backdoor maybe intended
to only affect sshd linked to xz or simply forgot that there are
systems that won't be affected by the back door.
Linux distributions with systemd are now the vast majority, so maybe
the author didn't care about some Gentoo or slackware machines.
Maybe they have certain machines in mind for attacking, and they know what they run
And maybe another actor is working on attacking those others. They do not want/need a single vulnerability for attacking everything. Less surface for detection.
If he liked, he could affect them too because they most likely have
liblzma installed for other purposes. Although, sshd could be affected,
but various other packages could be if the author intended to do that.
-- Cheers, Carlos.
Malware find in the news: xz related.
Re: Malware find in the news: xz related.
