xzパッケージã«ä»•è¾¼ã¾ã‚ŒãŸ3å¹´ãŒã‹ã‚Šã®ãƒãƒƒã‚¯ãƒ‰ã‚¢ã€ã‚¹ã‚±ãƒ¼ãƒ«ç›´å‰ã«è¦‹ã¤ã‘ãŸã®ã¯Microsoftã®é–‹ç™ºè€… | gihyo.jpLinux Daily Topics xzパッケージã«ä»•è¾¼ã¾ã‚ŒãŸ3å¹´ãŒã‹ã‚Šã®ãƒãƒƒã‚¯ãƒ‰ã‚¢â â ã€ã‚¹ã‚±ãƒ¼ãƒ«ç›´å‰ã«è¦‹ã¤ã‘ãŸã®ã¯Microsoftã®é–‹ç™ºè€… “アップストリームã®xzリãƒã‚¸ãƒˆãƒªã¨xz tarballsã¯ãƒãƒƒã‚¯ãƒ‰ã‚¢åŒ–ã•ã‚Œã¦ã„る（The upstream xz repository and the xz tarballs have been backdoored）â â€â€•2024å¹´3月29æ—¥ã€Microsoftã«æ‰€å±žã™ã‚‹é–‹ç™ºè€… Andres FreundãŒã€ŒOpenwall.comã€ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã«æŠ•ç¨¿ã—ãŸãƒã‚¹ãƒˆã¯ä¸–ç•Œä¸ã®ã‚ªãƒ¼ãƒ—ンソース関係者ã«è¡æ’ƒã‚’与ãˆãŸã€‚ backdoor in upstream xz/liblzma leading to ssh server compromise -oss-security 主è¦ãªLinuxディストリビューションã«ã¯ã»ã¼å«ã¾ã‚Œã¦ã„るデータ圧縮プãƒã‚°ãƒ©
{{#tags}}- {{label}}
{{/tags}}