How the XZ backdoor works

Posted Apr 3, 2024 8:20 UTC (Wed) by pbonzini (subscriber, #60935)
In reply to: How the XZ backdoor works by Heretic_Blacksheep
Parent article: How the XZ backdoor works

RHEL does rebase some packages to a newer upstream version, but that's rare for packages that don't have a substantial upstream community behind them. xz would have been updated to 5.6.1 in RHEL 10 (because it's forked from Fedora 40 which had it) but not before.