3 ms·

Jesus! Does anyone know if Debian stable is affected?

• ValdikSS 3y ago
  It's not. Neither Ubuntu.
  • anononaut 3y ago
    Do you have a source my friend? I thought Ubuntu was built off of Debian testing or unstable
    • ValdikSS 3y ago
      The latest version in 23.10 is 5.4.1-0.2 https://packages.ubuntu.com/mantic/liblzma5 https://packages.ubuntu.com/mantic/liblzma5 And in unreleased 24.04 is 5.4.5-0.3 https://packages.ubuntu.com/noble/liblzma5 https://packages.ubuntu.com/noble/liblzma5 There are no changelog entries indicating that the package was reverted.
    • deleted 3y ago
      [deleted]
• djao 3y ago
  The stable releases don't have this particular backdoor, but they're still using older versions of the library that were released by the same bad actor.