Mastodawn

Ars Technica Mar 29, 2024

Backdoor found in widely used Linux utility breaks encrypted SSH connections

Malicious code planted in xz Utils has been circulating for more than a month.

https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Backdoor found in widely used Linux utility targets encrypted SSH connections

Malicious code planted in xz Utils has been circulating for more than a month.

Ars Technica

@arstechnica I just checked an up to date Pop!_OS system and that had an older version of xz not affected by this particular problem. The article I read claimed it had been found in time so that it isn't in production systems. We were lucky.