@p @p @sjw @graf @Moon For those of you with similar issues:
I was having trouble running this on my only debian box. For some reason I need to use sudo for basically every high level thing, even in a rooted shell
#! /bin/bash set -eu # find path to liblzma used by sshd path="$(sudo ldd $(sudo which sshd) | grep liblzma | grep -o '/[^ ]*')" # does it even exist? if [ "$path" == "" ] then echo probably not vulnerable exit fi # check for function signature if hexdump -ve '1/1 "%.2x"' "$path" | grep -q f30f1efa554889f54c89ce5389fb81e7000000804883ec28488954241848894c2410 then echo probably vulnerable else echo probably not vulnerable fiThis should fix that.
Unrelated, but I cannot seem to find liblzma linked to sshd on Devuan. Is this normal? Because liblzma5 is installed on the box, but doesn’t come back on a which search.