Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Jakub Jirutka 🇪🇺🇺🇦 (jakub@social.jirutka.cz)'s status on Saturday, 30-Mar-2024 06:00:47 JST Jakub Jirutka 🇪🇺🇺🇦

xz 5.6.0 and 5.6.1 source tarballs are backdoored. Investigation found that no #alpinelinux xz binary is affected.
- stable branches uses xz 5.4 or older
- edge uses unaffected tarball
- the backdoor doesn't work with musl
https://www.openwall.com/lists/oss-security/2024/03/29/4

In conversation about 8 months ago from social.jirutka.cz permalink
- Haelwenn /элвэн/ :triskell: likes this.

Feeds