LXer: Backdoor Found in xz/liblzma Library, Exposing ssh
 

Published at LXer:

The popular xz library is compromised, opens doors to unauthorized SSH access.

Read More...

SSH access...

"... doing verification of signatures with algorithms that are disabled still seems fairly suboptimal, increasing the amount of code reachable without having any valid access."

Andreas raised the SSH issue here https://bugzilla.mindrot.org/show_bug.cgi?id=3675