Unveiling the xz Utils Backdoor which deliberately opens our SSH connections for RCEs
In the latest liblzma update, a trusted bad actor called 'JiaT75' implemented a backdoor which allows RCE (sending calls to system()) on ssh connections. Here I'm looking into the case and explaining how it works.
Links:
AndresFreundTec on Mastodon: https://mastodon.social/@AndresFreund...
openwall email: https://www.openwall.com/lists/oss-se...
debian repo: https://salsa.debian.org/debian/xz-ut...
Filippo Valsorda on bsky: https://bsky.app/profile/filippo.abys...
Watch video Unveiling the xz Utils Backdoor which deliberately opens our SSH connections for RCEs online without registration, duration hours minute second in high quality. This video was added by user Jadi 31 March 2024, don't forget to share it with your friends and acquaintances, it has been viewed on our site 23,069 once and liked it 574 people.