Navigating Project Management and Supply Chain Dynamics in Open Source Development

There’s only one news story this week and it’s a big one. A backdoor has been found in xz-utils, and there’s a lot to discuss about it. Plus details of a couple of Linux events in the UK later this year.

Support us on Patreon and get an ad-free RSS feed with early episodes sometimes

News

Hybrid Cloud Show is a new show that’s part of the Late Night Linux Family!

Subscribe to the All Episodes feed

How one volunteer stopped a backdoor from exposing Linux systems worldwide

backdoor in upstream xz/liblzma leading to ssh server compromise

Everything I know about the XZ backdoor

research!rsc: Timeline of the xz open source attack

XZ threat actor Jia Tan’s change to libarchive which introduced an exploitable situation made it into Windows

New XZ backdoor scanner detects implant in any Linux binary

The Mystery of ‘Jia Tan,’ the XZ Backdoor Mastermind

Noble Numbat Beta delayed (xz/liblzma security update)

Ubuntu Security Podcast Episode 224

I am not a supplier

OggCamp is happening later this year!

Gary gives us the details.