BACKDOOR IN XZ/LIBLZMA LEADING TO SSH COMPROMISE

Summary from the TLDR InfoSec newsletter

A backdoor was found in the xz/liblzma compression library, impacting Linux systems using specific OpenSSH builds. It was submitted by a core developer to the project with years of legitimate contributions. The backdoor was discovered by a user who noticed a new memory leak in the project.