If you see 5.6.0 or 5.6.1, you are vulnerable and you need to downgrade.
- https://boehs.org/node/everything-i-know-about-the-xz-backdoor
- https://duo.com/decipher/red-hat-warns-of-malicious-code-in-xz-utils
- https://www.linkedin.com/feed/update/urn:li:activity:7179599944549363714/
- https://twitter.com/badsectorlabs/status/1773759444486177023
- https://www.openwall.com/lists/oss-security/2024/03/29/4
- https://twitter.com/CISACyber/status/1773767592286593077
- https://www.redhat.com/en/blog/urgent-security-alert-fedora-41-and-rawhide-users
- https://access.redhat.com/security/cve/CVE-2024-3094
- https://twitter.com/sans_isc/status/1773790125035499624
- https://twitter.com/zer0pwn/status/1773768368840941712
- https://news.ycombinator.com/item?id=39865810
- https://twitter.com/johullrich/status/1773783275791667386
- https://twitter.com/bl4sty/status/1773786503728050675
- https://twitter.com/JeremyRubin/status/1773794314377629871
- https://twitter.com/JFrogSecurity/status/1773798915730551073
- https://twitter.com/f0wlsec/status/1773803563258396860
- https://twitter.com/thegrugq/status/1773827042414678445
- https://twitter.com/birchb0y/status/1773871381890924872
- https://twitter.com/hackerfantastic/status/1773864354439417983
- https://twitter.com/ryotkak/status/1773873735659118959
- https://twitter.com/shimariso/status/1773882069703369187
- https://twitter.com/shibanyan_1/status/1773887083377254739
- Homebrew/homebrew-core#167512
- https://github.com/libarchive/libarchive