News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by WesolyKubeczek on Saturday March 30, 2024 @07:11AM (#39873736)
> I've long since said that if you want to hide something nefarious you'd do that in the GNU autoconf soup

If I recall correctly, xz can be built with both autoconf and cmake, are cmake configs similarly affected?

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by amiga386 on Saturday March 30, 2024 @10:50AM (#39875418)
Yes, there is evidence of sabotage on the CMake configs too.

https://git.tukaani.org/?p=xz.git;a=commit;h=f9cf4c05edd14de...

[ Parent | on HN ]