Re: Malware find in the news: xz related.

On Sun, 31 Mar 2024, Carlos E.R. wrote:

On 2024-03-31 01:22, Computer Nerd Kev wrote:

Computer Nerd Kev <not@telling.you.invalid> wrote:

MarioCCCP <NoliMihiFrangereMentulam@libero.it> wrote:

 any hints to patch the vulnerability, or will it be
addressed soon and be released as security updates ?

 The code was targeting Debian, and only reached the Testing version
of Debian

 And RHEL, and of course all the distros based on those (or at least
those using Systemd).
 

>
openSUSE Tumbleweed and openSUSE MicroOS are affected.
>
Not Leap nor SLES.
>
>

Are you sure? I check with ldd on my leap 15.5 and it links to the compression library. But maybe another version perhaps.