Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by josefx on Monday April 01, 2024 @09:25AM (#39893948)

Have a system were you wxpect the sandboxing to work and have an automated check that it compiles there?

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by ptx on Tuesday April 02, 2024 @07:42AM (#39904607)

Part of the backdoor was in the tests. The attacker in this case could easily have sabotaged the test as well if a test was required.

[ Parent | on HN ]