Forums before death by AOL, social media and spammers... "We can't have nice things"
|    alt.os.linux.slackware    |    I think its the one without Selinux crap    |    87,272 messages    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
|    Message 86,915 of 87,272    |
|    Henrik Carlqvist to Joseph Rosevear    |
|    Re: Is Slackware xz safe?    |
|    29 Jan 25 05:31:27    |
      From: Henrik.Carlqvist@deadspam.com              On Tue, 28 Jan 2025 23:43:33 +0000, Joseph Rosevear wrote:              > If you haven't heard, it is a vulnerability present in some instances of       > xz. Slackware has /usr/bin/xz, so that raises the question, "Are we       > safe?"              As John wrote, stable Slackware 15.0 has never been affected by any of       those bad versions. For those running the alpha or beta version of the       next stable Slackware, also known as "Slackware current", the bad       versions 5.6.0 and 5.6.1 was included for a short time. However, if I       understand things right, the xz.SlackBuild script used to build from       source does not user cmake but the old school way of "./configure; make"       and did not produce any bad binaries. Even if Slackware would have had       any bad binaries from any bad version it would not have become any ssh       backdoor as Slackware does not run systemd.              regards Henrik              --- SoupGate-DOS v1.05        * Origin: you cannot sedate... all the things you hate (1:229/2)    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
(c) 1994, bbs@darkrealms.ca