Saturday assorted links:
Everything I know about the XZ backdoor
A timeline of events starting in 2021
🔗 https://boehs.org/node/everything-i-know-about-the-xz-backdoor
---
What Is Hedgehog? - The Bitcoin Manual
🔗 https://thebitcoinmanual.com/articles/hedgehog/
---
oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
Looks like someone managed to get a backdoor into ssh in Fedora and Debian. Update ASAP.
🔗 https://www.openwall.com/lists/oss-security/2024/03/29/4