[2024-03-29T18:39:50Z] just letting y'all know, since a friend told me about this: xz got backdoored, supposedly https://www.openwall.com/lists/oss-security/2024/03/29/4 [2024-03-29T18:40:26Z] versions 5.6.0 and 5.6.1 are affected they say, and community packages seem to be packaging the latter [2024-03-29T18:42:47Z] relevant discussion here: https://news.ycombinator.com/item?id=39865810 [2024-03-29T19:05:34Z] interesting [2024-03-29T21:11:04Z] maybe just roll it back in core then? [2024-03-29T21:17:25Z] i dont belive kiss is affected by this. no bash, no sysD etc