Bug#1068107: cloud.debian.org: pull images with compromised xz packages

2024-04-01 Thread Bastian Blank
On Sat, Mar 30, 2024 at 12:44:35PM -0700, Ross Vandegrift wrote: > Finally, apologies for not being able to do this myself - I still do not have > my account setup for access to core machines. Tasks related to this incident are tracked here:

Bug#1068107: cloud.debian.org: pull images with compromised xz packages

2024-03-30 Thread Ross Vandegrift
Package: cloud.debian.org Severity: important X-Debbugs-Cc: rvandegr...@debian.org Hi team, We should probably pull the daily sid and trixie images built with the compromised xz-utils. Looking at the json manifests, this would be: sid: all images since 2024-02-27 trixie: 2024-03-05