technology

23271 readers

123 users here now

On the road to fully automated luxury gay space communism.

Spreading Linux propaganda since 2020

Rules:

1. Obviously abide by the sitewide code of conduct. Bigotry will be met with an immediate ban
2. This community is about technology. Offtopic is permitted as long as it is kept in the comment sections
3. Although this is not /c/libre, FOSS related posting is tolerated, and even welcome in the case of effort posts
4. We believe technology should be liberating. As such, avoid promoting proprietary and/or bourgeois technology
5. Explanatory posts to correct the potential mistakes a comrade made in a post of their own are allowed, as long as they remain respectful
6. No crypto (Bitcoin, NFT, etc.) speculation, unless it is purely informative and not too cringe
7. Absolutely no tech bro shit. If you have a good opinion of Silicon Valley billionaires please manifest yourself so we can ban you.

founded 4 years ago

MODERATORS

submitted 7 months ago* (last edited 7 months ago) by [email protected] to c/[email protected]

30 comments fedilink hide all child comments

If you're running version 5.6.0 or 5.6.1, downgrade immediately.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 23 points 7 months ago (2 children)

Do not run xz --version. Instead check the version in your package manager.

[–] [email protected] 13 points 7 months ago* (last edited 7 months ago) (2 children)

debian/ubuntu based distros:
apt show xz-utils
or
dpkg -l | grep xz

redhat/fedora-based:
yum info xz
dnf info xz

arch-based:
pacman -Qi xz

EDIT: correction as suggested below

[–] [email protected] 3 points 7 months ago

On my machine the package name is slightly different:

apt show xz-utils

[–] [email protected] 2 points 7 months ago

5.4.1, my habit of putting off updates pays off again

[–] [email protected] 5 points 7 months ago (1 children)

Why is that? I know the latter gives you more info, but it's still the same thing isn't it?

[–] [email protected] 20 points 7 months ago (1 children)

Because you are running the affected software. It's a bad idea to run something if we are aware that it contains or relies on malicious code.

[–] [email protected] 14 points 7 months ago

Omg obviously. Can't believe I didn't realize that. Thanks for the answer.