Backdoor found in widely used Linux utility breaks encrypted SSH connections
arstechnica.com
Malicious code planted in xz Utils has been circulating for more than a month.

TL;DR there was a backdoor found in the XZ program. All major distros have been updated but it is recommended that you do a fresh install on systems that are exposed to the internet and that had the bad version of the program. Only upstream distros were affected.

  • Possibly linuxOPEnglish
    8•1 year ago

    I honestly think BSD has the potential to be worse due lack of people. I think the best option is to not be paranoid as a user. If someone needs to be paranoid it is the maintainers.

      • Possibly linuxOPEnglish
        1•1 year ago

        These people do not seem to be affected unless they run Arch for some reason.

      • @[email protected]
        2•1 year ago

        And I don’t think you understand OPs point. Of course you should be paranoid as a person like that, but most users aren’t targets. If you, as a regular user, get this paranoid about using computers, maybe you should evaluate your priorities.