Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)
4122 points by rkta | 1526 comments
Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.









































![Screenshot of inside.java: Project Wayfield – The JDK Wayland Desktop on Linux [video]](https://hn.urlbox.com/shots/renders/2024/3/29/843274a5-f2c0-45c0-a290-0a522ca8c3f8.jpg)






