Gerald Benischke
03/29/2024, 8:07 PMbackdoor in upstream xz/liblzma leading to ssh server compromise
• https://www.openwall.com/lists/oss-security/2024/03/29/4 • https://archlinux.org/news/the-xz-package-has-been-backdoored/ • https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094 • https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users Hugs to anyone in security!