oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
openwall.com /lists/oss-security/2024/03/29/4
The upstream xz repository and the xz tarballs have been backdoored.