Kevin Beaumont on Nostr: I suspect distros probably want to roll XZ back to around January 2024, stop bundling ...
I suspect distros probably want to roll XZ back to around January 2024, stop bundling updates until the developer is removed in GitHub or a logical explanation can be given, and somebody needs to fund a code review of it.
Published at
2024-03-29 17:27:51Event JSON
{
"id": "6ce87257ee0133d105a159f229c508fa8be81000ba2065658216ba6221261f42",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1711733271,
"kind": 1,
"tags": [
[
"e",
"7fae9d9cfee7fcec446a87b60e708597db93fccf81ba8b8bf77932fd015ee3c5",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/112180151677249717",
"activitypub"
]
],
"content": "I suspect distros probably want to roll XZ back to around January 2024, stop bundling updates until the developer is removed in GitHub or a logical explanation can be given, and somebody needs to fund a code review of it.",
"sig": "9b2d8b4ca25c0b6ce278be0b1b9ca117a68b66f3b390ad6fc0f25d8f2ca5722e168f9c7e0b5c6bd9f61a56867f5bdbe8b8adddbb67e700e41804e99484322a85"
}
