News for hackers. Stuff that matters.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by fransje26 on Friday March 29, 2024 @01:34PM (#39866782)
I did notice that my debian-based system got noticeably slower and unresponsive at times the last two weeks, without obvious reasons. Could it be related?

I read through the report, but what wasn't directly clear to me was: what does the exploit actually do?

My normal internet connection has such an appalling upload that I don't think anything relevant could be uploaded. But I will change my ssh keys asap.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by anarazel on Friday March 29, 2024 @01:58PM (#39867057)
> I did notice that my debian-based system got noticeably slower and unresponsive at times the last two weeks, without obvious reasons. Could it be related?

Possible but unlikely.

> I read through the report, but what wasn't directly clear to me was: what does the exploit actually do?

It injects code that runs early during sshd connection establishment. Likely allowing remote code execution if you know the right magic to send to the server.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by fransje26 on Friday March 29, 2024 @04:37PM (#39868739)
Thank you for the explanation.
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by cpach on Friday March 29, 2024 @02:08PM (#39867162)
Are you on stable/testing/unstable?

With our current knowledge, stable shouldn’t be affected by this.

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by fransje26 on Friday March 29, 2024 @04:35PM (#39868717)
Stable, luckily. Thank you for the information.