Bug#1068329: seems xz-utils 5.6.0 and 5.6.1 deb files has the backdoor, please remove both

To: ZenWalker <scow@riseup.net>, 1068329@bugs.debian.org
Subject: Bug#1068329: seems xz-utils 5.6.0 and 5.6.1 deb files has the backdoor, please remove both
From: Martin Zobel-Helas <zobel@ftbfs.de>
Date: Thu, 4 Apr 2024 01:05:09 +0200
Message-id: <[🔎] 34D45DC6-58B8-42EF-9953-2FEE4723C32D@ftbfs.de>
Reply-to: Martin Zobel-Helas <zobel@ftbfs.de>, 1068329@bugs.debian.org
In-reply-to: <[🔎] 171215197433.29024.16689750605024845427.reportbug@debian.debian>
References: <[🔎] 171215197433.29024.16689750605024845427.reportbug@debian.debian> <[🔎] 171215197433.29024.16689750605024845427.reportbug@debian.debian>

Hi ZenWorker,

Am 03.04.2024 um 15:51 schrieb ZenWalker <scow@riseup.net>:

Package: snapshot.debian.org
Severity: grave

Debian is tracking issues related to the xz backdoor additionally at https://salsa.debian.org/ftp-team/xz-2024-incident/. I made Bastian aware of your perfect catch and this is now also https://salsa.debian.org/ftp-team/xz-2024-incident/-/issues/13.

Thank you for your help!

Martin

Reply to:

References:
- Bug#1068329: seems xz-utils 5.6.0 and 5.6.1 deb files has the backdoor, please remove both
  - From: ZenWalker <scow@riseup.net>

Prev by Date: Bug#1068329: seems xz-utils 5.6.0 and 5.6.1 deb files has the backdoor, please remove both
Next by Date: [Git][snapshot-team/snapshot][master] 2 commits: Move the indexing lock to the database
Previous by thread: Bug#1068329: seems xz-utils 5.6.0 and 5.6.1 deb files has the backdoor, please remove both
Next by thread: [Git][snapshot-team/snapshot][master] 2 commits: Move the indexing lock to the database
Index(es):
- Date
- Thread