Atemu@lemmy.ml to Linux@lemmy.ml · 3 years agobackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comexternal-linkmessage-square28linkfedilinkarrow-up1286arrow-down13
arrow-up1283arrow-down1external-linkbackdoor in upstream xz/liblzma leading to ssh server compromisewww.openwall.comAtemu@lemmy.ml to Linux@lemmy.ml · 3 years agomessage-square28linkfedilink
minus-squareDaniel Quinn@lemmy.calinkfedilinkEnglisharrow-up2·3 years agoWhy didn’t this become a thing? Surely in 2024, we should be able to build packages from source and sign releases with a private key.
Why didn’t this become a thing? Surely in 2024, we should be able to build packages from source and sign releases with a private key.