3 ms·
The malicious build script included heuristics to only include the backdoor if you were building a .deb or .rpm package (the Debian and Fedora formats respectiv
by csande17 2y ago
The malicious build script included heuristics to only include the backdoor if you were building a .deb or .rpm package (the Debian and Fedora formats respectively). Other distros would have been affected if they used the same packaging setup -- Ubuntu also uses .deb, for example, because it's based on Debian.
And some distros IIRC considered themselves "affected" if they ever used a malicious version of the code, just in case, even if the backdoor didn't actually get compiled in to their version.
- cassianoleal 2y agoIt's odd to call RPM the "Fedora" format. It literally means Red Hat Package Manager [0]. Well, at least it used to, according to Wikipedia. :D It's true that Red Hat now owns Fedora, but the adoption went the other way around. [0] https://en.wikipedia.org/wiki/RPM_Package_Manager https://en.wikipedia.org/wiki/RPM_Package_Manager