NetBSD Foundation 🚩 on Nostr: Regarding the XZ backdoor: NetBSD 8 -> xz 5.2.1, apparently unaffected NetBSD 9, 10, ...

Regarding the XZ backdoor:

NetBSD 8 -> xz 5.2.1, apparently unaffected
NetBSD 9, 10, current -> xz 5.2.4, apparently unaffected
stable pkgsrc -> xz 5.4.5, apparently unaffected
current pkgsrc -> affected.

Most NetBSD systems do _not_ use xz from pkgsrc. Update pkgsrc and replace the package if you have a custom configuration with --prefer-pkgsrc yes