Embed Notice

Red Hatter rwmj on https://news.ycombinator.com/item?id=39866275:

> the apparent author of the backdoor was in communication with me over several weeks trying to get xz 5.6.x added to Fedora 40 & 41 because of it's "great new features". We even worked with him to fix the valgrind issue (which it turns out now was caused by the backdoor […]

> He has been part of the xz project for 2 years, adding all sorts of binary test files

> with this level of sophistication I would be suspicious of even older versions of xz