openSUSE addresses supply chain attack against xz compression library

[NewsBot]

A new openSUSE blog post/announcement has been posted!

openSUSE maintainers received notification of a supply chain attack against the “xz” compression tool and “liblzma5” library. Background Security Researcher Andres Freund reported to Debian that the xz / liblzma library had been backdoored. This backdoor was introduced in the upstream github xz project with release 5.6.0 in February 2024…

Get the full details here: https://news.opensuse.org/2024/03/29/xz-backdoor/