ldd/usr/sbin/sshd - Alpine vs. Ubuntu for exploitability of CVE-2024-3094
Hardening works. Ubuntu has liblzma that is vulnerable to CVE-2024-3094, Alpine not
Julius Davies
Alpine
Ubuntu
Which feels safer to you?
Note: “ldd” is a linux command-line utility for listing all library dependencies of a program. In theory some versions of “ldd” can be unsafe to run against untrusted programs.
About the author: Julius Davis - MergeBase Co-founder & Advisor. Senior architect and developer with strong academic background and roots in the open-source community. Contributor to a number of important open-source projects.
Julius Davies
Julius was the co-founder and CTO of MergeBase, where he led the development of the company’s advanced software composition analysis technology. A longtime contributor to the open source community, Julius brings deep technical expertise in secure software development.