3 ms·
This wasn't a vulnerability in openssh though, this was from systemd, where I think your point in fact is stronger.
by noobermin 3y ago
This wasn't a vulnerability in openssh though, this was from systemd, where I think your point in fact is stronger.
- ninkendo 3y agoIt’s not a vulnerability in systemd either, it’s a vulnerability in xz, which libsystemd depends on, and libsystemd is only integrated into OpenSSH in certain distributions, and only to avoid writing ~5 lines of C code to write the string “READY=1” to a socket specified in an environment variable. Systemd itself doesn’t even use lzma/xz… libsystemd does, and that’s a library meant to help other software integrate with systemd. It’s not really the same thing.