Re: xz backdoor
Sirius <sirius@trudheim.com> writes:
> This is quite actively discussed on Fedora lists.
> https://www.openwall.com/lists/oss-security/2024/
> https://www.openwall.com/lists/oss-security/2024/03/29/4
> Worth taking a look if action need to be taken on Debian.
The version of xz-utils was reverted to 5.4.5 in unstable yesterday by the
security team and migrated to testing today. Anyone running an unstable
or testing system should urgently upgrade.
--
Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>
Reply to: