On 2024-03-29, a backdoor was publicly disclosed in the - xz-utils + XZ Utils software. Inferencium systems did have the affected versions of this software installed, and the tools were used. The software has since been downgraded to the last-known safe version.
@@ -83,6 +83,13 @@ precautionary measure. All files and Git commits, tags, and releases signed with the previous key, even after discovery of the backdoor, up to 2024-04-01, are secure and validly signed by me; the key should not be trusted after this date. +I completely support Lasse Collin during this time. Support should be provided to him for + what occurred to his project and how it was sabotaged. He clearly had good intentions and + was burnt out from the commitment to his project, which led to Jia Tan taking advantage of + him. He has posted + his own, official statement + on behalf of the XZ Utils project and how it intends to move forward. Assistance should be + provided to support both him and the community.