Re: Recent security issues (guix-daemon and xz)

[Giovanni Biscuolo]

Hello,

John Kehayias <john.kehayias@protonmail.com> writes:

[...]

>
> Secondly, perhaps many have heard of the recent security issue
> (backdoor) in the xz project:
>
> - <https://www.openwall.com/lists/oss-security/2024/03/29/4> (original
>   disclosure)
>
> - <https://nvd.nist.gov/vuln/detail/CVE-2024-3094> (CVE-2024-3094)

Pointers to related threads on guix-devel:

1. https://lists.gnu.org/archive/html/guix-devel/2024-03/msg00281.html
   
https://yhetil.org/guix/KRd7y7M0o1HQsUlHonV0ZJDzgHgrAh6Mn1dnSvKq9RBCgBRTcy-MlK9Ai6PJPmiwzTh59wNVrAioo3n0uSrZ4r3n-YX9JOhtX6V6E1P37PQ=@protonmail.com/
   Message-ID: 
KRd7y7M0o1HQsUlHonV0ZJDzgHgrAh6Mn1dnSvKq9RBCgBRTcy-MlK9Ai6PJPmiwzTh59wNVrAioo3n0uSrZ4r3n-YX9JOhtX6V6E1P37PQ=@protonmail.com/

2. https://lists.gnu.org/archive/html/guix-devel/2024-03/msg00284.html
   https://yhetil.org/guix/87ttkon4c4.fsf@protonmail.com/
   Message-ID: 87ttkon4c4.fsf@protonmail.com

3. https://lists.gnu.org/archive/html/guix-devel/2024-04/msg00000.html
   3ae39210-ba8b-49df-0ea1-c520011b7cf3@gmail.com/">https://yhetil.org/guix/3ae39210-ba8b-49df-0ea1-c520011b7cf3@gmail.com/
   Message-ID: 3ae39210-ba8b-49df-0ea1-c520011b7cf3@gmail.com

HTH! Gio'

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

signature.asc
Description: PGP signature