testeronious@lemmy.world to Linux@lemmy.ml · 9 months agoXZ Utils is back on GitHub and Lasse Collin has been unbannedgithub.comexternal-linkmessage-square58fedilinkarrow-up1486cross-posted to: linux@lemmy.world
arrow-up1486external-linkXZ Utils is back on GitHub and Lasse Collin has been unbannedgithub.comtesteronious@lemmy.world to Linux@lemmy.ml · 9 months agomessage-square58fedilinkcross-posted to: linux@lemmy.world
minus-squarexlash123@sh.itjust.workslinkfedilinkarrow-up270·9 months agoCommit 77a294d Update maintainer and author info. The other maintainer suddenly disappeared. Lmao, that’s putting it lightly.
minus-square7eter@feddit.delinkfedilinkarrow-up164·9 months agothe other maintainer now has a special place: Special author: Jia Tan was a co-maintainer in 2022-2024. He and the team behind him inserted a backdoor (CVE-2024-3094) into XZ Utils 5.6.0 and 5.6.1 releases. He suddenly disappeared when this was discovered.
minus-squarerollingflower@lemmy.kde.sociallinkfedilinkDeutscharrow-up46·edit-29 months agoRIP Jia Tan
minus-squareintrepid@lemmy.calinkfedilinkarrow-up8·9 months agoI don’t think they would be in much peace. It was years of their work that was ruined by a person with OCD and valgrind.
minus-squarerollingflower@lemmy.kde.sociallinkfedilinkDeutscharrow-up74·9 months agoCan we stop calling a good software dev autistic or stuff?
minus-squareautokludge@programming.devlinkfedilinkEnglisharrow-up72·edit-29 months ago - Backdoors are bad for security.
minus-squareReakDuck@lemmy.mllinkfedilinkarrow-up40·edit-29 months agoHmm yes. The floor is made out of floor
minus-squaremutter9355@discuss.tchncs.delinkfedilinkarrow-up3·9 months agoI like how the first point made is that the backdoor violates the Debian Free Software Guidelines, as if that’s the main problem
Commit 77a294d
Lmao, that’s putting it lightly.
the other maintainer now has a special place:
RIP Jia Tan
I don’t think they would be in much peace. It was years of their work that was ruined by a person with OCD and valgrind.
Can we stop calling a good software dev autistic or stuff?
Hmm yes.
The floor is made out of floor
I like how the first point made is that the backdoor violates the Debian Free Software Guidelines, as if that’s the main problem