What we know about the xz Utils backdoor that almost infected the world

Re:What we know about the xz Utils backdoor that almost infe... by Denvercoder9 on Monday April 01, 2024 @09:20AM (#39893895)

Arch, Gentoo and openSUSE Tumbleweed are hardly the world.

[ Parent | on HN ]

Re:What we know about the xz Utils backdoor that almost infe... by samtheprogram on Monday April 01, 2024 @10:34AM (#39894562)

Arch and Gentoo were also not supported, although the code shipped, because the exploit explicitly checked for RPM- and deb-packaged distros.

Suse is RPM based, but don’t remember whether the check was for the utilities or another method — Suse uses zypper for package management, as opposed to yum/dnf on the far more popular RedHat-based distros, so it depends how the exploit checked.

[ Parent | on HN ]

Re:What we know about the xz Utils backdoor that almost infe... by jwilk on Monday April 01, 2024 @11:34AM (#39895260)

The initial advisory (https://news.ycombinator.com/item?id=39865810) said it was:

  test "x$RPM_ARCH" = "xx86_64"

[ Parent | on HN ]