News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by YetAnotherNick on Friday March 29, 2024 @03:21PM (#39867944)
I am not completely sure about this exploit, but seems like a binary needed to be modified for the exploit to work[1] which was later picked up by build system.

https://github.com/tukaani-project/xz/commit/6e636819e8f0703...

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ok123456 on Friday March 29, 2024 @03:49PM (#39868257)
The binary was an xz test file that contained a script that patched the c-code.
[ Parent | on HN ]