梓瑶酱
@Ziyao233
She & Linux Kernel & Compiler & eweOS Dev - AlpineLinux User & HAM & Former OIer & toki pona & Girl Friend @QxrAtAl
ID:1484457641090842630
https://ziyao233.github.io 21-01-2022 09:27:46
2,9K Tweets
555 Followers
119 Following
xz 5.6.0 and 5.6.1 source tarballs are backdoored. Investigation found that no #alpinelinux xz binary is affected.
- stable branches uses xz 5.4 or older.
- edge uses unaffected tarball
- the backdoor doesn't work with musl
openwall.com/lists/oss-secu…