• piefedderatedd
    link
    fedilink
    26 months ago

    There was a comment on Mastodon or Lemmy saying that the bad actor had been working with the project for two years so earlier versions may have malicious code as well already.

    • @mumblerfish
      link
      56 months ago

      Distros like gentoo reverted to 5.4.2 for that reason. If debian stable is on 5.4.1 that should be ok.

    • @[email protected]
      link
      fedilink
      56 months ago

      They did but the malware wasn’t fully implemented yet. They spent quite a while implementing it, I guess to try and make it less obvious.