News for hackers. Stuff that matters.

A comment on What we know about the xz Utils backdoor that almost infected the world. Parent comment

Re:What we know about the xz Utils backdoor that almost infe... by joveian on Monday April 01, 2024 @10:55PM (#39901936)
It doesn't seem to have been actually included in the Arch (binary) package but only because the backdoor build system itself didn't include the backdoor for Arch. If you cmp -l liblzma.so.5.6.1 between xz-5.6.1-1 and xz-5.6.1-2 there are only tiny differences. I'm guessing they didn't notice this before writing the advisory.

https://github.com/QubesOS/qubes-issues/issues/9067#issuecom...

[ Parent | on HN ]
Re:What we know about the xz Utils backdoor that almost infe... by auguzanellato on Tuesday April 02, 2024 @04:43AM (#39903563)
That’s because one of the first stages of the backdoor, that’s actually running at build time, checks if the distro is DEB or RPM based and aborts otherwise
[ Parent | on HN ]