erAck

And a meanwhile growing large topic on Hacker News.

Apparently not, you can check commits in https://git.tukaani.org/?p=xz.git;a=summary the first authored commit was 2022-01-28, then long time nothing until 2022-06-10, the first merge as committer was 2022-12-16.

Making one a maintainer (with merge and possibly even direct commit/push permissions) is handing them a key to the kingdom. Recruiting a maintainer out of the blue without them being already contributor and long term participant in the project is questionable.

Of the xz/liblzma backdoor incident.

Malicious account holders with a long term goal need to build reputation. It doesn't matter much that such an app isn't a dependency of other software.

This is how one attracts and invites Jia Tan and Hans Jansen types.

They are not beta, they are not test, betas of a to-be-new release are released before a version is released as fresh. And once a new version (e.g. 24.8) will be released, it will become the fresh version and the so far fresh (24.2) version will become the still version. Naming and then renaming releases in between would be even more confusing; that actually was done in the past by having Fresh and Still names but people didn't grok the rotating scheme so now just version numbers are used.

There are always two versions, the fresh latest with newer features ("If you're a technology enthusiast, early adopter or power user, this version is for you"), and the still one ("This version is slightly older and does not have the latest features, but it has been tested for longer") for more cautious users. Citations from https://www.libreoffice.org/download/download-libreoffice/

First choice GIMP. Then, Digikam has an image editor that provides a number of tools. Not as detailed and sophisticated as GIMP but does most things needed.

Meh, not available in Android versions :-/ You could disable deletion of cookies and site data, and use the Cookie AutoDelete Add-On to delete cookies and data (you'll have to enable that once) and add sites you want to keep there in the whitelist while you are visiting them.

When clearing Cookies and Site Data, under Manage Exceptions add the URLs of the web sites you want to keep data for, i.e. Allow.

RCE CVEs are a thing.