[Hampshire] Security compromise in liblzma/OpenSSH daemon

Top Page

Reply to this message
Author: Nick Chalk via Hampshire
Date:  
To: Hampshire
CC: Nick Chalk
Subject: [Hampshire] Security compromise in liblzma/OpenSSH daemon
In case anyone hasn't seen this...

A security compromise has been discovered in
liblzma, part of the XZ compression utilities.
This can affect OpenSSH's sshd, due to integration
with systemd.

Article:
https://lwn.net/Articles/967180/

Mailing list thread:
https://lwn.net/ml/oss-security/20240329155126.kjjfduxw2yrlxgzm@awork3.anarazel.de/

It's likely to only affect unstable or testing
distributions.

Nick.

--
Nick Chalk ................. once a Radio Designer
Confidence is failing to understand the problem.


--
Please post to: Hampshire@???
Manage subscription: https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG website: http://www.hantslug.org.uk
--------------------------------------------------------------