graf, 3 months ago (edited 3 months ago)

@p @p check this out @sjw @Moon somebody introduced a backdoor into xz/xz-utils (debian/ubuntu) via systemd and openssh (openrc chads stay winning)

openwall.com/lists/oss-security/2024/03/29/4

github.com/tukaani-project/xz/commit/af071ef7702debef4f1d324616a0137a5001c14c

:arch: CVE is up security.archlinux.org/CVE-2024-3094

:gentoo: is marked in-progress bugs.gentoo.org/show_bug.cgi?id=CVE-2024-3094