Path: ...!news.mixmin.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail From: RonB Newsgroups: comp.os.linux.advocacy Subject: Re: XZ Vulnerabillity. Gentoo Immune. Date: Sun, 31 Mar 2024 05:10:11 -0000 (UTC) Organization: A noiseless patient Spider Lines: 39 Message-ID: References: <17c188832fe8c1a2$137067$3716115$802601b3@news.usenetexpress.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Injection-Date: Sun, 31 Mar 2024 05:10:11 +0200 (CEST) Injection-Info: dont-email.me; posting-host="585ab8355b3e77b45bc03c9d37a82b6b"; logging-data="1615508"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+yh6Lj0Ym3IaC+azB3yry+" User-Agent: slrn/1.0.3 (Linux) Cancel-Lock: sha1:pKrUQf7l1tsRGiP34VmSh1jJLDM= Bytes: 2352 On 2024-03-30, Chris Ahlstrom wrote: > Farley Flud wrote this copyrighted missive and expects royalties: > >> The mainstream GNU/Linux distros are infected with poisoned >> XZ code. >> >> But Gentoo is totally immune: >> >> "Our current understanding of the backdoor is that is does >> not affect Gentoo systems, because 1. the backdoor only >> appears to be included on specific systems and Gentoo does >> not qualify; 2. the backdoor as it is currently understood >> targets OpenSSH patched to work with systemd-notify support. >> Gentoo does not support or include these patches;" >> >> (From the Gentoo Security Database) >> >> >> Ha, ha, ha, ha, ha, ha, ha! That piece of junk systemd >> does it again! >> >> Brother, unless you are using systemd-free Gentoo, then >> you are tremendously sick in the head. >> >> Ha, ha, ha, ha, ha, ha, ha! > > Run "xz --version" and tell us what you see. In Linux Mint 20.3, 5.2.4. In Linux Mint 21.3, 5.2.5. (The advantage of non-cutting edge.) In Fedora 39 before update, 5.4.4. After updated... same. Fedora kernel now up to 6.7.10-200. -- [Self-centered, Woke] "pride is a life of self-destructive fakery, an entrapment to a false and self-created matrix of twisted unreality." "It was pride that changed angels into devils..." — St. Augustine