Re: backdoor in upstream xz/liblzma leading to ssh server compromise

[Solar Designer <solar () openwall com>]

On Sat, Mar 30, 2024 at 11:00:09PM +0100, Solar Designer wrote:
> I'm also attaching 3 extra files Gynvael provided - the stage 1 and
> stage 2 shell scripts (gzipped to ensure they get through unmangled) and
> a PNG image helping visualize the data layout (referenced in the middle
> of the text below).

>    https://gynvael.coldwind.pl/img/good-large_compressed.data.png

I totally forgot the mailing list is configured to strip images (since
they're too commonly used in people's e-mail signatures).  Temporarily
disabled, and resending (just the image now).

Alexander