Conversation

Notices

1. Embed this notice
   Thorsten Leemhuis (acct. 1/4) (kernellogger@fosstodon.org)'s status on Sunday, 31-Mar-2024 05:51:04 JST Thorsten Leemhuis (acct. 1/4)

   in reply to

   Lasse Collin, original author of #Xz, replied on #LKML: https://lore.kernel.org/lkml/20240330144848.102a1e8c@kaneli/

   "'"[…] I'm on a holiday and only happened to look at my emails and it seems to be a major mess.

   My proper investigation efforts likely start in the first days of April. That is, I currently know only a few facts which alone are bad enough.

   Info will be updated here: https://tukaani.org/xz-backdoor/"'"

   #CVE20243094 #Linux #kernel #LinuxKernel #Backdoor

   • Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Thorsten Leemhuis (acct. 1/4) (kernellogger@fosstodon.org)'s status on Sunday, 31-Mar-2024 05:51:05 JST Thorsten Leemhuis (acct. 1/4)

     Lasse Collin's patch-series updating the #LinuxKernel's #xz code that a few days ago hit #linux-next was dropped for now until backdooring of upstream xz is understood better:

     https://lore.kernel.org/all/20240329195602.382cb1c99bb70e3d8c6093ae@linux-foundation.org/

     Haelwenn /элвэн/ :triskell: repeated this.