Backdoor found in widely used Linux utility

[Ice Tea]

Backdoor found in widely used Linux utility breaks encrypted SSH connections

Malicious code planted in xz Utils has been circulating for more than a month.

arstechnica.com

Malicious backdoor spotted in Linux compression library xz

Red Hat in all caps says STOP USAGE OF ANY FEDORA RAWHIDE INSTANCES

www.theregister.com

 

[Ice Tea]

Malicious xz backdoor reveals fragility of open source

This time, we got lucky. It mostly affected bleeding-edge distros. But that's not a defense strategy

www.theregister.com

More info, i've not had time to read through it yet.

 

[Ice Tea]

Open source groups fear xz repeat as suspicious messages fly

Social engineering patterns spotted across range of popular projects

www.theregister.com

Sigh!