Excellent summary by Solar Designer on oss-security of what's happened in the last two weeks in response to the #xz #backdoor:
openwall.com/lists/oss-securit…
Noteworthy:
- #OpenSSH implemented systemd notification
- #systemd moves to dlopen(3) for some dependencies
- another detailed timeline at research.swtch.com/xz-timeline
- similar social engineering takeover attempts suspected in #OpenJS and #OpenSSF
