Several people have (rightly) asked if Snikket is affected by the malicious backdoor found in the widely-used #xz project. It is not affected.
However if you are self-hosting, do be sure that your system is also not affected, and up to date with available security patches.
More info in our blog post:
https://snikket.org/blog/xz-backdoor-cve-2024-3094/
Snikket /
npub1s6…cdfcy
2024-03-30 11:25:15
Author Public Key
npub1s6s6tjdhfftgavg934a20s6e0fwg5tx4q04kfptpejzf4lsg9jys5cdfcySeen on
wss://relay.nostr.bandPublished at
2024-03-30 11:25:15Event JSON
{
"id": "5891127bf0547ac3d2130e147514c8675f5563e8ee025743fedbc2cfcd53c8dc",
"pubkey": "86a1a5c9b74a568eb1058d7aa7c3597a5c8a2cd503eb648561cc849afe082c89",
"created_at": 1711797915,
"kind": 1,
"tags": [
[
"t",
"xz"
],
[
"proxy",
"https://fosstodon.org/users/snikket_im/statuses/112184388197885687",
"activitypub"
]
],
"content": "Several people have (rightly) asked if Snikket is affected by the malicious backdoor found in the widely-used #xz project. It is not affected.\n\nHowever if you are self-hosting, do be sure that your system is also not affected, and up to date with available security patches.\n\nMore info in our blog post:\nhttps://snikket.org/blog/xz-backdoor-cve-2024-3094/",
"sig": "a86c7e930d940db3b30a849a41b830036267cb5a83a6747ff55e9042156d7b98ed44c5271d5c55ea7b22d4df58b2d68ea95d699f75660278e902e680957b3af7"
}