<tomas@tuxteam.de> writes: > On Sun, Nov 23, 2025 at 05:33:01PM +0000, Richard Lewis wrote: >> > https://en.wikipedia.org/wiki/Xz_backdoor >> >> Is there also a write-up of Debian's response and/or learning from this incident? > > Follow link #21 in the above reference. well that is about fixing the specific cve, but that's not really the same as a write-up of the overall response, which involved lots of people doing lots of things