XZ tools and libraries compromised with a critical issue

Comments

• 5714@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago

  How did this happen?

  source

  • the_third@feddit.de ⁨1⁩ ⁨year⁩ ago

    Currently the explanation that fits the situation best: One of the two maintainer accounts of xz acted as a bad actor. It is unclear whether there’s an actual person behind that account, so further speculation regarding motifs doesn’t make sense.

    source

    • 5714@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago

      I hope some folks find out more as times moves on.

      source