Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.project > #14029

Re: about XZ backdoor

Path csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod
From <tomas@tuxteam.de>
Newsgroups linux.debian.project
Subject Re: about XZ backdoor
Date Fri, 21 Nov 2025 23:30:01 +0100
Message-ID <LTHND-eJgv-3@gated-at.bofh.it> (permalink)
References <LTDK1-eGHo-1@gated-at.bofh.it>
X-Mailbox-Line From debian-project-request@lists.debian.org Fri Nov 21 22:26:48 2025
Old-Return-Path <tomas@tuxteam.de>
X-Amavis-Spam-Status No, score=-16.3 required=4.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,DKIM_VALID_EF,LDOSUBSCRIBER,LDO_WHITELIST,PGPSIGNATURE, RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6
X-Amavis-Spam-Status No, score=-12.198 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001] autolearn=ham autolearn_force=no
X-Policyd-Weight using cached result; rate: -4.6
MIME-Version 1.0
Content-Type multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="hS1R+x+xGfWhwp9x"
Content-Disposition inline
Moderated yes
X-Mailing-List <debian-project@lists.debian.org> archive/latest/32076
List-ID <debian-project.lists.debian.org>
List-URL <https://lists.debian.org/debian-project/>
List-Archive https://lists.debian.org/msgid-search/aSDhIz14lYNAw9Ge@tuxteam.de
Approved robomod@news.nic.it
Lines 43
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Cc debian-project@lists.debian.org
X-Original-Date Fri, 21 Nov 2025 23:01:07 +0100
X-Original-Message-ID <aSDhIz14lYNAw9Ge@tuxteam.de>
X-Original-References <CAK32FY0rYC=f+CgJjS2dKszij_cU403x9CzcaMLP+Yd--phDxw@mail.gmail.com>
Xref csiph.com linux.debian.project:14029

Show key headers only | View raw


[Multipart message — attachments visible in raw view] - view raw

On Fri, Nov 21, 2025 at 11:22:15AM +0000, William Richards #SaveOurInternet wrote:
> Would the backdoor have affected any Debian Linux web servers or cloud
> environments?
> Also how bad is the actual backdoor? Does the backdoor activate on your
> system while you’re writing it to be a part of the binary of another
> program? Also with targeting x86-64 does it just mean Linux computers that
> use x86-64?
> 
> - 1 million top web servers use Linux
> - Linux powers most of Global Cloud Environment
> - 500 supercomputers use Linux
> - Android is based off Linux

Actually, if you do you homework, you can find out for yourself. Start
here:

  https://en.wikipedia.org/wiki/Xz_backdoor

and follow the relevant links.

Cheers
-- 
t

Back to linux.debian.project | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

about XZ backdoor "William Richards #SaveOurInternet" <corpseleague@gmail.com> - 2025-11-21 19:10 +0100
  Re: about XZ backdoor <tomas@tuxteam.de> - 2025-11-21 23:30 +0100
    Re: about XZ backdoor Richard Lewis <richard.lewis.debian@googlemail.com> - 2025-11-23 19:10 +0100
      Re: about XZ backdoor <tomas@tuxteam.de> - 2025-11-23 19:20 +0100
        Re: about XZ backdoor Richard Lewis <richard.lewis.debian@googlemail.com> - 2025-11-23 21:20 +0100

csiph-web