home bbs files messages ]

Forums before death by AOL, social media and spammers... "We can't have nice things"

   alt.os.linux.slackware      I think its the one without Selinux crap      87,272 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 86,915 of 87,272   
   Henrik Carlqvist to Joseph Rosevear   
   Re: Is Slackware xz safe?   
   29 Jan 25 05:31:27   
   
   From: Henrik.Carlqvist@deadspam.com   
      
   On Tue, 28 Jan 2025 23:43:33 +0000, Joseph Rosevear wrote:   
      
   > If you haven't heard, it is a vulnerability present in some instances of   
   > xz.  Slackware has /usr/bin/xz, so that raises the question, "Are we   
   > safe?"   
      
   As John wrote, stable Slackware 15.0 has never been affected by any of   
   those bad versions. For those running the alpha or beta version of the   
   next stable Slackware, also known as "Slackware current", the bad   
   versions 5.6.0 and 5.6.1 was included for a short time. However, if I   
   understand things right, the xz.SlackBuild script used to build from   
   source does not user cmake but the old school way of "./configure; make"   
   and did not produce any bad binaries. Even if Slackware would have had   
   any bad binaries from any bad version it would not have become any ssh   
   backdoor as Slackware does not run systemd.   
      
   regards Henrik   
      
   --- SoupGate-DOS v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca