[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dng
Subject:    Re: [DNG] [SECURITY] [DSA 5649-1] xz-utils security update
From:       Martin Steigerwald <martin () lichtvoll ! de>
Date:       2024-03-30 20:34:58
Message-ID: 5952301.MhkbZ0Pkbq () lichtvoll ! de
[Download RAW message or body]

Marin Ivanov - 30.03.24, 18:33:17 CET:
> Devuan is not affected.
> 
> > Devuan is not affected by the latest vulnerability caused by systemd.
> > The malicious backdoor in xz/liblzma is a vector for remote
> > exploitation of the ssh daemon due to a dependency on systemd for
> > notifications and due to systemd's call to dlopen() liblzma library
> > (CVE-2024-3094)
> Src: https://twitter.com/DevuanOrg/status/1774029432979653069

Ah, great!

Thanks.

-- 
Martin


_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[prev in list] [next in list] [prev in thread] [next in thread]