Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by josefx on Saturday March 30, 2024 @04:28PM (#39878307)

Shouldn't they have tests running to ensure that the check works on at least some systems?

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by windenntw on Sunday March 31, 2024 @06:30AM (#39883011)

What do you mean "tests"?

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by josefx on Monday April 01, 2024 @09:25AM (#39893948)

Have a system were you wxpect the sandboxing to work and have an automated check that it compiles there?

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ptx on Tuesday April 02, 2024 @07:42AM (#39904607)

Part of the backdoor was in the tests. The attacker in this case could easily have sabotaged the test as well if a test was required.

[ Parent | on HN ]