Thursday, April 04, 2024

Re: lcamtuf on the recent xz debacle

On 4/4/24 23:17, Katherine Mcmillan wrote:
> an open source data compression utility available on almost all installations of Linux and other Unix-like operating systems."

> There are a couple of problems with this statement, but I just want to
> focus in on the "almost all installations of Linux and other Unix-like
> operating systems" part.

The statement reads "available on almost all ...", which is correct, as
far as I can tell. But yes, the backdoor code in the version that was
discovered seems to have targeted only Linux.

No comments:

Post a Comment