Add link to xz-utils backdoor disclosure post

This commit is contained in:
inference 2024-04-01 20:42:38 +00:00
parent c023dcc0b0
commit 862df1fd8a
Signed by: inference
SSH Key Fingerprint: SHA256:K/a677+eHm7chi3X4s77BIpLTE9Vge1tsv+jUL5gI+Y

View File

@ -1,7 +1,7 @@
<!DOCTYPE html>
<!-- Inferencium - Website - News -->
<!-- Version: 1.2.0-alpha.1 -->
<!-- Version: 1.2.0-alpha.2 -->
<!-- Copyright 2024 Jake Winters -->
<!-- SPDX-License-Identifier: BSD-3-Clause -->
@ -48,7 +48,9 @@
<h2><a href="#2024-04-01">2024-04-01</a></h2>
<article id="key-ssh-update-20240401">
<h3><a href="#key-ssh-update-20240401">SSH Key Update</a></h3>
<p>On 2024-03-29, a backdoor was publicly disclosed in the
<p>On 2024-03-29, a
<a href="https://www.openwall.com/lists/oss-security/2024/03/29/4">backdoor was publicly disclosed</a>
in the
<a href="https://git.tukaani.org/?p=xz.git">xz-utils</a>
software. Inferencium systems <strong><em>did</em></strong> have the affected versions of
this software installed, and the tools were used. The software has since been downgraded to