Aníbal Monsalve Salazar via luv-main <[email protected]> writes: > On Sat, 2024-03-30 19:47:23 +1100, Aníbal Monsalve Salazar wrote: > > This is very urgent. > > Debian version 5.6.1+really5.4.5-1 is now available at
Question is: is downgrading to 5.4.5 really sufficient? Some people are saying 5.3.1 was the last trusted version. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068024 (although that has at least one security vulnerability that needs to be patched) And there might be other projects affected too. Terrible situation. More references: * https://www.openwall.com/lists/oss-security/2024/03/29/4 * https://www.youtube.com/watch?v=jqjtNDtbDNI * https://hackaday.com/2024/03/29/security-alert-potential-ssh-backdoor-via-liblzma/ -- Brian May @ Linux Penguins _______________________________________________ luv-main mailing list -- [email protected] To unsubscribe send an email to [email protected]
