A backdoor in xz
A backdoor in xz
Posted Mar 30, 2024 14:49 UTC (Sat) by geuder (subscriber, #62854)In reply to: A backdoor in xz by smurf
Parent article: A backdoor in xz
Yes. The risk I remembered is described in https://catonmat.net/ldd-arbitrary-code-execution.
It involves using a different loader, but the loader is specified by the main executable. Shared libraries cannot bring in their own one (AFAIK...).