What is Nostr?
Rafael Grether (devnull) /
npub1a3z…q6mz
2024-03-29 20:14:50

Rafael Grether (devnull) on Nostr: *0day (some hours ago)* Guys, a serious security flaw has just been discovered. The ...

*0day (some hours ago)*

Guys, a serious security flaw has just been discovered.

The xz library has been infected with a backdoor directly from the upstream.

SSH servers may be compromised since SSH uses the xz/liblzma. The backdoor is present in versions 5.6.0 and 5.6.1 of the library.

Offsec has just published that the backdoor affects Kali Linux from March 26th until today, and it is crucial to update the package.

Interestingly, the backdoor was discovered by a Microsoft engineer.

https://infosec.exchange/@kalilinux/112180505434870941
Author Public Key
npub1a3zdqytzxu9mw3wwl8887nluc3jm28m6u9jqmaxl6atwsmq6m9csl7q6mz