NetBSD Foundation 🚩 on Nostr: The version of xz shipped in all stable (and unstable) versions of NetBSD predates ...
The version of xz shipped in all stable (and unstable) versions of NetBSD predates any code changes by the author of the backdoor and is thus unaffected by the recent discoveries.
The version of xz shipped in pkgsrc, however, is affected - if you use xz from pkgsrc you need to take precautions. This is a non-default setting on NetBSD, and requires explicit opt-in.
Published at
2024-03-29 20:23:15Event JSON
{
"id": "81a3abde116269bc82fc92bf834ecfa54fe8f0cd84cbbecc77033a8eb5757132",
"pubkey": "40858d2dc9c0c8560f0b1e518843fbca59f886e28af7b79fc38dd88680a80633",
"created_at": 1711743795,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.sdf.org/users/netbsd/statuses/112180841411356057",
"activitypub"
]
],
"content": "The version of xz shipped in all stable (and unstable) versions of NetBSD predates any code changes by the author of the backdoor and is thus unaffected by the recent discoveries.\n\nThe version of xz shipped in pkgsrc, however, is affected - if you use xz from pkgsrc you need to take precautions. This is a non-default setting on NetBSD, and requires explicit opt-in.",
"sig": "4647100eb0dabd990646c080a17b835ddb87e4c33a64345ed86bb504d676ef3de35dbd6b0faa19b3e0b9b3fbfa83038c336a7717bb457e96c5433ff2d52ea9bb"
}
