Re: Malware find in the news: xz related.

On 2024-03-31 22:39, D wrote:

On Sun, 31 Mar 2024, Carlos E.R. wrote:

On 2024-03-31 01:22, Computer Nerd Kev wrote:

Computer Nerd Kev <not@telling.you.invalid> wrote:

MarioCCCP <NoliMihiFrangereMentulam@libero.it> wrote:

 any hints to patch the vulnerability, or will it be
addressed soon and be released as security updates ?

 The code was targeting Debian, and only reached the Testing version
of Debian

 And RHEL, and of course all the distros based on those (or at least
those using Systemd).
 

 openSUSE Tumbleweed and openSUSE MicroOS are affected.
 Not Leap nor SLES.
 

Are you sure? I check with ldd on my leap 15.5 and it links to the compression library. But maybe another version perhaps.

>
I am certain, from the information posted by openSUSE.
>
Leap uses old versions of almost everything.