Could anyone please tell me if current stable version of Debian has that backdoo... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		vasili111 on March 29, 2024 \| parent \| context \| favorite \| on: Backdoor in upstream xz/liblzma leading to SSH ser... Could anyone please tell me if current stable version of Debian has that backdoor or not?

yabones on March 29, 2024 | [–]

Debian stable has 5.4.1, the backdoored versions are 5.6.0-5.6.1

https://packages.debian.org/bookworm/xz-utils

https://packages.debian.org/bookworm/liblzma5

teddyh on March 29, 2024 | | [–]

It does not contain the backdoor: <https://security-tracker.debian.org/tracker/CVE-2024-3094<

anononaut on March 29, 2024 | [–]

Debian Stable seems to be in the clear.

https://lists.debian.org/debian-security-announce/2024/msg00...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact