RetroBBS - comp.os.linux.advocacy

Fedora Rawhide

<l6p43aFa7q1U6@mid.individual.net>

https://www.rocksolidbbs.com/computers/article-flat.php?id=12955&group=comp.os.linux.advocacy#12955

copy link Newsgroups: comp.os.linux.advocacy

Path: i2pn2.org!i2pn.org!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: bowman@montana.com (rbowman)
Newsgroups: comp.os.linux.advocacy
Subject: Fedora Rawhide
Date: 30 Mar 2024 00:18:50 GMT
Lines: 8
Message-ID: <l6p43aFa7q1U6@mid.individual.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Trace: individual.net Vqda4OdGIPa/Sgg9WnhnsAyjY2Y1LnO67ESGKp2ugdbXJYwErb
Cancel-Lock: sha1:lrBiOK80OD36l755Q2c/JYClSM0= sha256:kPyE4wLnIUL/E2of9fykE/BsHQUTphg0pBk1EjDHcGA=
User-Agent: Pan/0.149 (Bellevue; 4c157ba)

by: rbowman - Sat, 30 Mar 2024 00:18 UTC

https://fedoramagazine.org/cve-2024-3094-security-alert-f40-rawhide/
#more-40042

The corrupt xz is not limited to Fedora but so far is confined to beta
builds like Rawhide and not in released versions like Fedora 39.

https://en.wikipedia.org/wiki/XZ_Utils

Re: Fedora Rawhide

<uu89b3$qupi$2@dont-email.me>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=12974&group=comp.os.linux.advocacy#12974

copy link Newsgroups: comp.os.linux.advocacy

Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: comp.os.linux.advocacy
Subject: Re: Fedora Rawhide
Date: Sat, 30 Mar 2024 05:52:36 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 7
Message-ID: <uu89b3$qupi$2@dont-email.me>
References: <l6p43aFa7q1U6@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 30 Mar 2024 05:52:36 +0100 (CET)
Injection-Info: dont-email.me; posting-host="00aae38d006fb1a7163adabdc79fe7a3";
logging-data="883506"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/37GbjDinQMyicjda0EXQ4"
User-Agent: Pan/0.155 (Kherson; fc5a80b8)
Cancel-Lock: sha1:TCKUEYa9jo6kPpmy/abfYwO0NSo=

by: Lawrence D'Oliv - Sat, 30 Mar 2024 05:52 UTC

On 30 Mar 2024 00:18:50 GMT, rbowman wrote:

> The corrupt xz is not limited to Fedora but so far is confined to beta
> builds ...

Also Debian Unstable. I read about it this morning, and an update was
already available.

Re: Fedora Rawhide

<uu9aqc$12m8k$1@dont-email.me>

copy mid

https://www.rocksolidbbs.com/computers/article-flat.php?id=12992&group=comp.os.linux.advocacy#12992

copy link Newsgroups: comp.os.linux.advocacy

Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: OFeem1987@teleworm.us (Chris Ahlstrom)
Newsgroups: comp.os.linux.advocacy
Subject: Re: Fedora Rawhide
Date: Sat, 30 Mar 2024 11:23:54 -0400
Organization: None
Lines: 29
Message-ID: <uu9aqc$12m8k$1@dont-email.me>
References: <l6p43aFa7q1U6@mid.individual.net>
Reply-To: OFeem1987@teleworm.us
Injection-Date: Sat, 30 Mar 2024 15:23:57 +0100 (CET)
Injection-Info: dont-email.me; posting-host="031ec8965709af23e98d4ea7fefcd3e6";
logging-data="1136916"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/mEk3GXc8W9LNkqWXBmwRb"
User-Agent: slrn/1.0.3 (Linux)
Cancel-Lock: sha1:yLfiIgm8vGdHKYqC/c3J/PXlMXo=
X-Mutt: The most widely-used MUA
X-Slrn: Why use anything else?
X-User-Agent: Microsoft Outl00k, Usenet K00k Editions

by: Chris Ahlstrom - Sat, 30 Mar 2024 15:23 UTC

rbowman wrote this copyrighted missive and expects royalties:

> https://fedoramagazine.org/cve-2024-3094-security-alert-f40-rawhide/#more-40042
>
> The corrupt xz is not limited to Fedora but so far is confined to beta
> builds like Rawhide and not in released versions like Fedora 39.
>
> https://en.wikipedia.org/wiki/XZ_Utils

I see that it's date Apr 8 2022 (version 5.2.4) on the Ubuntu laptop, and
Mar 28 (version 5.6.1) on the Arch laptop.

https://fedoramagazine.org/cve-2024-3094-security-alert-f40-rawhide/#more-40042

The Fedora Project was made aware of CVE-2024-3094 on Friday, March 29th
related to the xz tools and libraries...

Hmmmm.

https://security.archlinux.org/CVE-2024-3094

AVG-2851 xz 5.6.0-1 5.6.1-2 Critical Fixed

Not yet updated via pacman.

--
There are more things in heaven and earth,
Horatio, than are dreamt of in your philosophy.
-- Wm. Shakespeare, "Hamlet"

Beware the new TTY code!

computers / comp.os.linux.advocacy / Fedora Rawhide

computers / comp.os.linux.advocacy / Fedora Rawhide

Subject	Author
Fedora Rawhide	rbowman
Re: Fedora Rawhide	Lawrence D'Oliveiro
Re: Fedora Rawhide	Chris Ahlstrom