Enno T. Boland on Nostr: A thing I wasn't aware of: systemd switched to dlopen'ing compression libraries on ...
A thing I wasn't aware of: systemd switched to dlopen'ing compression libraries on demand, rendering the #xz attack useless with one of their next releases. That's why apparently the attackers tried to push distributions to include the new xz version on their stable releases before the mitigation in systemd was included.
Published at
2024-04-01 23:13:41Event JSON
{
"id": "f70d6ce8f49e8cf2951999d7c5144e6b96b7262e855d1d2667ecacb9fb1920fb",
"pubkey": "18e0c9a257f8aa91611e1a259f44dd71734d8492c855f00bc9d71bbc04f9a6f5",
"created_at": 1712013221,
"kind": 1,
"tags": [
[
"t",
"xz"
],
[
"proxy",
"https://chaos.social/users/Gottox/statuses/112198498453503872",
"activitypub"
]
],
"content": "A thing I wasn't aware of: systemd switched to dlopen'ing compression libraries on demand, rendering the #xz attack useless with one of their next releases. That's why apparently the attackers tried to push distributions to include the new xz version on their stable releases before the mitigation in systemd was included.",
"sig": "e1c583661ae2eeed36c856b24fc608a8575da5b94886e9bdb08ee17c0b54b3edeb59933955549c37171342ab723a0ce74edcc6f34f229839a4e1b43b22902847"
}
