Comments (2)
According to ArsTechnica, the malicious code was added to xz Utils versions 5.6.0 and 5.6.1.
Based on this, I do not think xz Utils version 5.4 is affected.
Canonical has already removed the affected packages from the Ubuntu repositories.
Only systems with the malicious versions of xz
(5.6.0 and 5.6.1) installed are vulnerable, but files compressed using those malicious versions of xz
are not affected (per my understanding). In other words, if you created a customized OS using Cubic with xz Utils 5.6.0, your ISO would not be compromised. (However, if you also installed xz Utils versions 5.6.0 in your customized OS, it would be vulnerable to a backdoor attack).
from cubic.
Thanks very much for your reply.
I wish an nice week for you.
from cubic.
Related Issues (20)
- How do I change Linux MInt's Start Menu Icon in my distribution? HOT 1
- How To Change The DE In The "Live Environment" HOT 1
- Ubuntu Server 22.04 Disable Subiquity Installer HOT 2
- The ubuntu(20.04.5) image containing ros1 made by Cubic deletes the ros1 function package HOT 6
- Can the zstd compression level settings be modified? HOT 3
- Have problems if editing an Ubuntu noble ISO in an host Ubuntu Focal ? HOT 4
- Ubuntu 24.04 (beta) bootstrapper/installer seemingly crashes under install of live image
- Cubic reference removal from project HOT 4
- Any plans to make cubic properely support ubuntu 24.04? HOT 3
- Cubic breaks iso HOT 2
- Why can't I access the Typical and Minimal packages page? HOT 2
- Missing user after new install of Ubuntu 22.04 HOT 3
- How to customize the Plymouth Splash Screen on Ubuntu 24.04?
- Virtual environment state save HOT 1
- multi-user mode broken on 24.04 variants
- generated .iso doesn't boot once burnt to USB stick
- Cubic doesn't work together with autoinstall identity. HOT 1
- 24.04 Custom ISOs not reflecting snap removals / some installed app icons not displayed HOT 2
- Errors when install cubic on ubuntu 24.04 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cubic.