Chris 👾 on Nostr: How to quickly check if your #linux system may be affected by the recent XZ utils ...

How to quickly check if your #linux system may be affected by the recent XZ utils supply chain backdoor. Open your terminal, enter:

xz --version

bad: versions 5.6.0 or 5.6.1
ok: 5.4.6.

The malicious code could affect sshd authentification (CVE-2024-3094). Updates and downgrades for SuSE, Fedora, Kali and other distros are available.

Pop!_OS or Debian stable versions are not affected but it never hurts to double-check.

#XZ #liblzma #pop_os #debian #fedora