Ansil H’s Post

"don't run xz --version to check if you're compromised" If you have infected version of liblzma in your system, it's already loaded into EVERY process that depends on libsystemd. systemd's dependency on liblzma *was literally* the attack vector. To avoid compromising the system, if you're going to check if you have the backdoor version of **XZ**, don't run "xz --version". Instead, use: strings 'which xz' | grep "(XZ Utils)" Version lower than 5.6.0 is safe. #Linux #BackDoor

🚨 Updated RevPi kernel and a new version of our current image ⬇ Get them here RevPi kernel version 6.1: ➡ What' changed? https://lnkd.in/eFSF6vbz ➡ GitHub: https://lnkd.in/e3JPShPs ➡ GitLab: https://lnkd.in/eEcY29Wv RevPi Bullseye Image 09/2023 ➡ Release notes: https://lnkd.in/eWxv73_h ➡ Download: https://lnkd.in/eumj2eY7 #revolutionpi #kernel #linux #operatingsystem

Based on Debian 12 Bookworm, Tails 6.0 is available now https://lnkd.in/giTdFMh8 #Tails #Linux #Debian #GNOME #security #Bookworm 

Curl v8.4.0 is out, and fixes – among other things – a high-severity SOCKS5 heap buffer overflow vulnerability (CVE-2023-38545). Appropriate patches for some older curl versions have been released, too. https://lnkd.in/dmcRHQ2B Daniel Stenberg - HackerOne #curl #libcurl #Linux #containers #vulnerability #securityupdate #patch #opensource #infosecnews #cybersecuritynews

The xz library (part of the data compression tools) got hacked. Check your systems/repos/everything. A small additional dot in CMake file disabled the HAVE_LINUX_LANDLOCK symbol and enabled the backdoor to many projects as it may seem. https://lnkd.in/dj6Szr8H https://lnkd.in/dz2y3u6J #linux #cmake #softwaredevelopment

The Secrets of Grep is Here: Your Go-To Guide for Linux Debugging Ever wondered how to make sense of complex logs in Linux?  We've got you covered with our latest guide on using grep commands. From practical examples to tips that'll save you time, we're diving deep into the world of grep. Check it out now at: https://lnkd.in/dvY4Nhy6 #linux #os #opensource #tech #security #cheatsheet #grep

🧑🏻💻🫵 if you are USING KALI LINUX Update it NOW! 💥 And any other linux version that uses the XZ package: CVSS 10 👈 The xz package, starting from version 5.6.0 to 5.6.1, was found to contain a backdoor. The impact of this vulnerability affected Kali between March 26th to March 29th. If you updated your Kali installation on or after March 26th, it is crucial to apply the latest updates today. Here is the story: https://lnkd.in/g64vBBjS And more here https://lnkd.in/g6jAKQS5

So, this is a little bit embarrassing.😂 We have uncovered an issue with our email settings for our forum that prevented sending the verification message for new users after registration, which in turn, prevented anyone from posting for a long period of time. We have solved this issue now and we welcome all of you to post in our forums. 😄 https://lnkd.in/d2e6TfXF #Linux #OpenSource