Re: backdoor in upstream xz/liblzma leading to ssh server compromise

[Matt Johnston <matt () ucc asn au>]

On 2024-04-17 10:25 am, Jacob Bachmeyer wrote:

> see that particular slowdown?  (Not the backdoor initialization making
> sshd take longer to start up---a running sshd taking longer to reject
> a session for a nonexistent account, unless Andres Freund forgot to
> tell us that he was running sshd from inetd and thereby including sshd
> startup latency in his measurements.)

Recent OpenSSH always re-execs for each incoming connection (for fresh 
ASLR) so it's always similar to inetd startup.

Cheers,
Matt