Possibly linuxXZ backdoor in a nutshell
∟⊔⊤∦∣≶I have heard multiple times from different sources that building from git source instead of using tarballs invalidates this exploit, but I do not understand how. Is anyone able to explain that?
If malicious code is in the source, and therefore in the tarball, what’s the difference?
I think it is the other way around. If you build from Tarball then you getting pwned