Arch Linux: The xz package has been backdoored

A new Arch Linux blog post/announcement has been posted!

To determine if you are affected, run the following:

% xz --version
xz (XZ Utils) 5.4.4
liblzma 5.4.4

If you see 5.6.0 or 5.6.1, you are vulnerable and you need to downgrade.


Get the full details here: Arch Linux - News: The xz package has been backdoored

1 Like