The upstream xz repository and the xz tarballs have been backdoored.
ah, someone beat me to it and this was already posted on !linux
oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
Submitted 1 year ago by kbal@fedia.io to cybersecurity@infosec.pub
https://openwall.com/lists/oss-security/2024/03/29/4
pelya@lemmy.world 1 year ago
That’s wild.