Atemu@lemmy.ml to Linux@lemmy.ml · 11 months agobackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comexternal-linkmessage-square33fedilinkarrow-up132arrow-down10cross-posted to: selfhosted@lemmy.world
arrow-up132arrow-down1external-linkbackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comAtemu@lemmy.ml to Linux@lemmy.ml · 11 months agomessage-square33fedilinkcross-posted to: selfhosted@lemmy.world
minus-squareAmbiguousProps@lemmy.todaylinkfedilinkEnglisharrow-up3·11 months agoThey’ve been contributing to xz for two years, and commited various “test” binary files.
minus-squareAlex@lemmy.mllinkfedilinkarrow-up2·11 months agoIt’s looking more like a long game to compromise an upstream.
minus-squarecjk@feddit.delinkfedilinkarrow-up1·11 months agoEither that or the attacker was very good at choosing their puppet…
They’ve been contributing to xz for two years, and commited various “test” binary files.
It’s looking more like a long game to compromise an upstream.
Either that or the attacker was very good at choosing their puppet…