News for hackers. Stuff that matters.

A comment on Backdoor in upstream xz/liblzma leading to SSH server compromise. Parent comment

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by im3w1l on Saturday March 30, 2024 @09:01PM (#39880325)
Yes I know, and that's what I meant when I said "their own can of worms".

Distro-provided python packages don't use pip however, at least afaik.

[ Parent | on HN ]
Re:Backdoor in upstream xz/liblzma leading to SSH server com... by Denvercoder9 on Saturday March 30, 2024 @09:30PM (#39880506)
The distro-provided Python packages are usually still build from the source on PyPi as uploaded by the maintainer, not what's in git.
[ Parent | on HN ]