oss-sec mailing list archives Re: Update on the distro-backdoor-scanner effort From: Hank Leininger <hlein () korelogic com> Date: Sun, 28 Apr 2024 00:34:36 -0600 On 2024-04-27, Jacob Bachmeyer wrote: - Output is manageable; able to rule out all hits not part of the actual xz-utils backdoors as false positives. This is what I would expect: the backdoor dropper appears to have been specifically developed for xz-utils, but could /possibly/ be adaptable to other compression tools.