Re: Malware find in the news: xz related.

On 2024-03-31 22:39, D wrote:

On Sun, 31 Mar 2024, Carlos E.R. wrote:

On 2024-03-31 01:22, Computer Nerd Kev wrote:

Computer Nerd Kev <not@telling.you.invalid> wrote:

MarioCCCP <NoliMihiFrangereMentulam@libero.it> wrote:

>
any hints to patch the vulnerability, or will it be
addressed soon and be released as security updates ?

>
The code was targeting Debian, and only reached the Testing version
of Debian

>
And RHEL, and of course all the distros based on those (or at least
those using Systemd).
>

>
openSUSE Tumbleweed and openSUSE MicroOS are affected.
>
Not Leap nor SLES.
>
>

Are you sure? I check with ldd on my leap 15.5 and it links to the compression library. But maybe another version perhaps.

I am certain, from the information posted by openSUSE.
Leap uses old versions of almost everything.
--
Cheers, Carlos.