https://archlinux.org/news/the-xz-package-has-been-backdoored/
If you have version 5.6.1-2 you are good
You are not good if you have version 5.6.0-1 or 5.6.1-1
Older version 5.4.6 is also good
This for many Linux distros, not just Arch
Bwok
npub1mm5…07y3
2024-03-30 04:41:25
Author Public Key
npub1mm5h2xq80qyqj969q92yr9f6mq2vyt2w4646dxtrsk3a0hpary0qrs07y3Published at
2024-03-30 04:41:25Event JSON
{
"id": "5c08a0efd043a6b747b88e8f991f69780eb8dac7ffea9dab53cf930e6f44b052",
"pubkey": "dee97518077808091745015441953ad814c22d4eaeaba6996385a3d7dc3d191e",
"created_at": 1711770085,
"kind": 1,
"tags": [
[
"r",
"https://archlinux.org/news/the-xz-package-has-been-backdoored/"
],
[
"r",
"5.6.1-2"
],
[
"r",
"5.6.0-1"
],
[
"r",
"5.6.1-1"
]
],
"content": "https://archlinux.org/news/the-xz-package-has-been-backdoored/\n\nIf you have version 5.6.1-2 you are good\n\nYou are not good if you have version 5.6.0-1 or 5.6.1-1\n\nOlder version 5.4.6 is also good\n\nThis for many Linux distros, not just Arch",
"sig": "c6d976e73439ce24915634e3381d456f6e039745bcfbee74163b4f36123f4756da8ccca46ac38330912939bdb1299cef5511153b11514e18e5f1d54287e4420a"
}