Comment on How does the xz incident impacts the average user ? #xz
Glitchington@lemmy.world 8 months agoFrom the archlinux.org news post on the issue.
Arch does not directly link openssh to liblzma, and thus this attack vector is not possible.
lordnikon@lemmy.world 8 months ago
oh 100% i was just taking in general of upstream bleeding edge distro being vulnerable to this kind of upstream attack not specific to xz