2 ms·
Absolutely not. Extecatly this recipe brought us this desaster. The backdoor was in the released tar only, the sources were fine, because such a malicious m4 w
by rurban 3y ago
Absolutely not. Extecatly this recipe brought us this desaster.
The backdoor was in the released tar only, the sources were fine, because such a malicious m4 would have been detected. The compressed test bin containing the backdoor was in git, but such unobvious things do get attention.
- throwaway7356 3y ago> because such a malicious m4 would have been detected By the xz maintainer? I very much doubt that.