From 6957038f77afcfaec324fab25719520ae0760b74 Mon Sep 17 00:00:00 2001 From: inference Date: Mon, 1 Apr 2024 20:55:11 +0000 Subject: [PATCH] Clarify xz-utils backdoor `IFUNC`/glibc dependency --- news.xhtml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/news.xhtml b/news.xhtml index 0e5c01b..27f60e5 100644 --- a/news.xhtml +++ b/news.xhtml @@ -1,7 +1,7 @@ - + @@ -73,7 +73,8 @@

The only criteria met by Inferencium systems is amd64 as the system architecture; this is not enough for the backdoor to be effective. Even if all criteria other than running glibc were met, Inferencium systems would still be unaffected by this - attack due to musl not supporting the required IFUNC functionality.

+ attack due to musl not supporting the required IFUNC functionality which + the backdoor seems heavily dependent on.

Despite the evidence, it is unknown exactly what this malicious code does and is capable of in entirety. As a precautionary measure, I have generated a new SSH key and classified the previous key as compromised. You can find my new key on the