[LkStr]

https://www.openwall.com/lists/oss-secur...24/03/29/4

https://www.helpnetsecurity.com/2024/03/...-backdoor/

Kali Linux announced that the impact of this vulnerability affected Kali between March 26th and March 29th. If you updated your Kali installation on or after March 26th, applying the latest updates today is crucial to address this issue. However, if you did not update your Kali installation before the 26th, you are not affected by this backdoor vulnerability.

[WillyWonka]

https://www.openwall.com/lists/oss-secur...24/03/29/4

https://www.helpnetsecurity.com/2024/03/...-backdoor/

Kali Linux announced that the impact of this vulnerability affected Kali between March 26th and March 29th. If you updated your Kali installation on or after March 26th, applying the latest updates today is crucial to address this issue. However, if you did not update your Kali installation before the 26th, you are not affected by this backdoor vulnerability.

It is not just Kali Linux.

Arch also updated its xz package for the same reason

[chud]

https://www.openwall.com/lists/oss-secur...24/03/29/4

https://www.helpnetsecurity.com/2024/03/...-backdoor/

Kali Linux announced that the impact of this vulnerability affected Kali between March 26th and March 29th. If you updated your Kali installation on or after March 26th, applying the latest updates today is crucial to address this issue. However, if you did not update your Kali installation before the 26th, you are not affected by this backdoor vulnerability.

It is not just Kali Linux.

Arch also updated its xz package for the same reason

Arch wasn't affected, the build script was configured to only inject the malicious code in Debian/Fedora based package build environments.

[WillyWonka]

https://www.openwall.com/lists/oss-secur...24/03/29/4

https://www.helpnetsecurity.com/2024/03/...-backdoor/

Kali Linux announced that the impact of this vulnerability affected Kali between March 26th and March 29th. If you updated your Kali installation on or after March 26th, applying the latest updates today is crucial to address this issue. However, if you did not update your Kali installation before the 26th, you are not affected by this backdoor vulnerability.

It is not just Kali Linux.

Arch also updated its xz package for the same reason

Arch wasn't affected, the build script was configured to only inject the malicious code in Debian/Fedora based package build environments.

Yes, the malicious code path did not exist in the arch version of sshd by default.

However, there was a vulnerable package.

https://security.archlinux.org/AVG-2851