474
Arch with XZ
(lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 30 Mar 2024
474 points (84.4% liked)
linuxmemes
19701 readers
727 users here now
I use Arch btw
Sister communities:
- LemmyMemes: Memes
- LemmyShitpost: Anything and everything goes.
- RISA: Star Trek memes and shitposts
Community rules
- Follow the site-wide rules and code of conduct
- Be civil
- Post Linux-related content
- No recent reposts
Please report posts and comments that break these rules!
founded 1 year ago
MODERATORS
Incorrect: the backdoored version was originally discovered by a Debian sid user on their system, and it presumably worked. On arch it's questionable since they don't link
sshdwithliblzma(although some say some kind of a cross-contamination may be possible via a patch used to support some systemd thingy, and systemd usesliblzma). Also, probably the rolling opensuse, and mb Ubuntu. Also nixos-unstalbe, but it doesn't pass theargv[0]requirements and also doesn't linkliblzma. Also, fedora.Btw, https://security.archlinux.org/ASA-202403-1
Sid was that dickhead in Toystory that broke the toys.
If you're running debian sid and not expecting it to be a buggy insecure mess, then you're doing debian wrong.
Fedora and debian was affected in beta/dev branch only, unlike arch
Unlike arch that has no "stable". Yap, sure; idk what it was supposed to mean, tho.
Yes, but Arch, though it had the compromised package, it appears the package didn't actually compromise Arch because of how both Arch and the attack were set up.