Conversation

Notices

1. Embed this notice
   Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 30-Mar-2024 03:02:05 JST Haelwenn /элвэн/ :triskell:
   btw I'm unaffected by the xz/lzma-utils backdoor, the only x86_64*linux-gnu machine I still have doesn't uses 5.6.0+ and doesn't uses gcc (and even then it would be CC=${CHOST}-gcc not CC=gcc as that would lead to a "command not found").
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 30-Mar-2024 03:05:56 JST Haelwenn /элвэн/ :triskell:

     in reply to
     A thing I'd now wonder is the social part of it as I guess I'm not the only one who'd rather not continue using tukaani's implementation of xz/lzma.
     
     And another thing I wonder, the bug mentions OpenSSH but uuh… is it even supposed to use xz? I don't see it as a dependency here, runtime automagic?
   • Embed this notice
     Trolli Schmittlauch 🦥 (schmittlauch@toot.matereal.eu)'s status on Saturday, 30-Mar-2024 03:07:58 JST Trolli Schmittlauch 🦥

     in reply to

     @lanodan No, openssh in debian (and e.g. NixOS) is patched to use libsystemd for better system integration – and _that_ uses liblzma.

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 30-Mar-2024 03:09:38 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Trolli Schmittlauch 🦥
     @schmittlauch Pffft.
     Yet another way that couldn't reach me.