The xz package that has already entered the current F40 pre-release versions/variants and rawhide contains malicious code. This does NOT affect users of the Fedora releases (F38, F39 are thus not affected), but all users who use already F40 pre-release versions/variants or rawhide shall read this: Article: CVE details: https://access.redhat.com/security/cve/CVE-2024-3094 Be aware that this is CVE criticality 10: this is the highest risk factor. Also be aware that the header of the RH arti...
    • gnuplusmatt@reddthat.com
      4·
      8 months ago

      Nuke from orbit might be an overreaction, if you need that machine perhaps disable ssh or turn the machine off until later next week when the postmortems happen. If you need that trusted machine now, then yes fresh install

      • Possibly linux@lemmy.zipEnglish
        4·
        8 months ago

        Honestly doing a fresh install is a good test of your recovery abilities. You should always have a way to restore critical content in an emergency

        • afterthoughts@lemmy.ca
          1·
          8 months ago

          I feel legitimately sorry for anyone who takes your rhetoric to heart.

          Try not to let these 🧩’s pull you down rabbit holes, guys.