News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by javajosh on Saturday March 30, 2024 @01:15AM (#39872032)
>Ironic considering security is often advertised as a feature of rolling release distros.

Security is a feature of rolling release. But supply-chain attacks like this are the exception to the rule.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by yreg on Saturday March 30, 2024 @07:05AM (#39873704)
Isn't that what security-updates-only is for?

This particular backdoor is not shipped inside of a security patch, right?

[ Parent | on HN ]