The backdoor is in an .m4 file that gets parsed by autoconf to generate the conf... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

nicolas_17 on March 29, 2024 | parent | context | favorite | on: Backdoor in upstream xz/liblzma leading to SSH ser...

The backdoor is in an .m4 file that gets parsed by autoconf to generate the configure script. Running autoconf yourself won't save you.

rwmj on March 29, 2024 [–]

That's not entirely true. autoreconf will regenerate m4/build-to-host.m4 but only if you delete it first.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact