Recent searches
Search options
Details on the #backdoor in #xz for users of #Fedora 40 and 41/rawhide:
https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users
"'"PLEASE IMMEDIATELY STOP USAGE OF ANY FEDORA RAWHIDE INSTANCES […]
At this time the @fedora Linux 40 builds have not been shown to be compromised. We believe the malicious code injection did not take effect in these builds. However, Fedora Linux 40 users should still downgrade to a 5.4 build to be safe. […] can force the update by following the instructions at https://bodhi.fedoraproject.org/updates/FEDORA-2024-d02c7bb266."'"
www.redhat.comUrgent security alert for Fedora 41 and Fedora Rawhide usersRed Hat Information Risk and Security and Red Hat Product Security learned that the latest versions of the “xz” tools and libraries contain malicious code that appears to be intended to allow unauthorized access.
@ixs thx; not that one, but another mail about it in kernel context, yes.
@knurd42 That's a *LOT* of effort. My hat's off to the team behind that account.