Comment on XZ tools and libraries compromised with a critical issue

5714@lemmy.dbzer0.com ⁨2⁩ ⁨years⁩ ago

• the_third@feddit.de ⁨2⁩ ⁨years⁩ ago

  Currently the explanation that fits the situation best: One of the two maintainer accounts of xz acted as a bad actor. It is unclear whether there’s an actual person behind that account, so further speculation regarding motifs doesn’t make sense.

  source

  • 5714@lemmy.dbzer0.com ⁨2⁩ ⁨years⁩ ago

    I hope some folks find out more as times moves on.

    source