oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise
www.openwall.com