Rafael Grether (devnull) on Nostr: *0day (some hours ago)* Guys, a serious security flaw has just been discovered. The ...
*0day (some hours ago)*
Guys, a serious security flaw has just been discovered.
The xz library has been infected with a backdoor directly from the upstream.
SSH servers may be compromised since SSH uses the xz/liblzma. The backdoor is present in versions 5.6.0 and 5.6.1 of the library.
Offsec has just published that the backdoor affects Kali Linux from March 26th until today, and it is crucial to update the package.
Interestingly, the backdoor was discovered by a Microsoft engineer.
https://infosec.exchange/@kalilinux/112180505434870941
Guys, a serious security flaw has just been discovered.
The xz library has been infected with a backdoor directly from the upstream.
SSH servers may be compromised since SSH uses the xz/liblzma. The backdoor is present in versions 5.6.0 and 5.6.1 of the library.
Offsec has just published that the backdoor affects Kali Linux from March 26th until today, and it is crucial to update the package.
Interestingly, the backdoor was discovered by a Microsoft engineer.
https://infosec.exchange/@kalilinux/112180505434870941