Kyle Taylor on Nostr: xz vulnerability discovered by an SE doing routine benchmarking on #debian unstable. ...

xz vulnerability discovered by an SE doing routine benchmarking on #debian unstable. Benchmark-ers and fuzz-ers are heros.

... Freund said he discovered the backdoor by chance while benchmarking a Linux-based Debian installation. During the tests, he realized that XZ Utils was triggering high CPU consumption with SSH processes...

https://www.pcmag.com/news/software-engineer-stops-attempt-to-add-backdoor-to-linux-operating-systems