News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by everybackdoor on Saturday March 30, 2024 @04:59AM (#39873074)
They may be right: https://git.alpinelinux.org/aports/log/main/gettext

Timeline matches and there is a sudden switch of maintainer. And they add dependency to xz!

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by kaathewise on Saturday March 30, 2024 @07:45AM (#39873923)
psykose was a prolific contributor to Alpine's aports, with thousands of commits over the past few years[0]. So, I doubt They're involved.

[0]: https://git.alpinelinux.org/aports/stats/?period=y&ofs=10

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by everybackdoor on Saturday March 30, 2024 @09:31AM (#39874681)
JiaT75 was also a prolific contributor to xz over the past few years, so your assumptions are generally invalid at this point.
[ Parent | on HN ]