The xz package has been backdoored

Support System Updates
,
1

According to the Arch announcement,
https://archlinux.org/news/the-xz-package-has-been-backdoored/

The xz package has been backdoored
TL;DR: Upgrade your systems and container images now!

I checked my Manjaro KDE stable:

% xz --version
xz (XZ Utils) 5.6.0
liblzma 5.6.0

Can I manually downgrade my xz version?
Manjaro Stable was just updated and will probably take a few weeks for the official upgrade.

2

Already addressed. Please search before posting:

No, downgrading would put you in an unsupported, partial upgrade state. Update instead.

2 Likes