3 ms·
On arch, `ldd $(which sshd)` doesn't list lzma or xz, so I think it's unaffected? Obviously still not great to be shipping malicious code that just happens to n
by gpm 3y ago
On arch, `ldd $(which sshd)` doesn't list lzma or xz, so I think it's unaffected? Obviously still not great to be shipping malicious code that just happens to not trigger.
- fullstop 3y agoMy Arch setup is the same, they must not patch openssh.
- altairprime 3y agoDeleted per below
- gpm 3y agoThis is what the `detect_sh.bin` attached to the email does. I can only assume that the pesron who reported the vulnerability checked that this succeeds in detecting it. Note that I'm not looking for the vulnerable symbols, I'm looking for the library that does the patching in the first place.
- altairprime 3y agoDeleted, thanks.