91
Today marks the 10th anniversary of the Heartbleed vulnerability in OpenSSL, which had the same ultimate root cause as recent XZUtils backdoor incident (optimizedbyotto.com)
submitted 2 years ago by to c/technology@lemmy.world
5 comments fedilink hide all child comments
 

The XZ Utils backdoor, discovered last week, and the Heartbleed security vulnerability ten years ago, share the same ultimate root cause. Both of them, and in fact all critical infrastructure open source projects, should be fixed with the same solution: ensure baseline funding for proper open source maintenance.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago (2 children)

So am I understanding correctly that this code wasn’t exactly handled as a normal team? Like XZ had one person vetting the replacement?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •