News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by nicolas_17 on Friday March 29, 2024 @02:18PM (#39867281)
The backdoor is in an .m4 file that gets parsed by autoconf to generate the configure script. Running autoconf yourself won't save you.
[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by rwmj on Friday March 29, 2024 @03:53PM (#39868296)
That's not entirely true. autoreconf will regenerate m4/build-to-host.m4 but only if you delete it first.
[ Parent | on HN ]