2 ms·

This is another interesting link about the issue: https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor https://lcamtuf.substack.com/p/technologis

by jmclnx 3y ago

This is another interesting link about the issue: https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-ba... It mentions something not being reported, the issue is with a Linux specific patch to OpenSSH. If the patch did not exist there would be no issue. This is not an OpenSSH issue but a Linux issue.

iforgotpassword 3y ago
> It mentions something not being reported This has been reported and discussed from the start, even in the initial report. Also it's not a Linux specific patch or issue, rather a patch used by some Linux distros for tighter systemd integration.