this post was submitted on 05 Apr 2024
175 points (91.5% liked)

Linux

48199 readers
1357 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
175
Did One Guy Just Stop a Huge Cyberattack? (www.nytimes.com)
submitted 7 months ago by [email protected] to c/[email protected]
49 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 25 points 7 months ago (6 children)

You're late to the party NYT.

Also, dude made a good save. Only arch users got hit lol

[–] [email protected] 32 points 7 months ago* (last edited 7 months ago) (1 children)

  1. The hack mainly targeted Debian and fedora

  2. Arch doesn't directly link openssh to liblzma, so the hack doesn't affect arch users.

[–] [email protected] 7 points 7 months ago

The hack mainly targeted Debian and fedora

But on Debian it only shipped on sid. This is the reason for Debians slow as fuck release cycle

[–] [email protected] 26 points 7 months ago

Arch didn't patch it with systemd so it didn't really affect them afaik. It did hit OpenSUSE Tumbleweed users.

[–] [email protected] 26 points 7 months ago

Do you know the exploit was detected in Debian Sid? (by a PostgreSQL developer), Arch got the update (with both compromised versions), but because don't directly link openssh to liblzma (as Debian), and thus this attack vector is not possible.

Also, other rolling distros also got the compromised versions, maybe: openSUSE Tumbleweed, Endeavour OS, Fedora Rawhide, Slackware -current, etc.

[–] [email protected] 6 points 7 months ago

There was some checking in the exploit to verify that it was being built for a deb or rpm package, it didn't build for anything else. Also, the way the exploit was loaded at runtime relied on features of systemd that Arch isn't using. It was a dud on Arch.

[–] [email protected] 5 points 7 months ago (1 children)

Fedora 40 testing branch and rawhide got it as well, as well tumbleweed and debian sid