Vulnerability in key Linux system library 

Best video I have seen on the topic!

0:29 don't ask the program what version it is. You're running a possibly compromised program in order ask it what version it is. It could be lying. It could attempt something nefarious. Instead ask your program manager what version it is. This is one way ask apt for the version: "apt show xz-utils | grep Version". Someone else suggests "apt list | grep liblzma" and that also works.

Please do not use the command "xz --version" to find which one you have! After all, why would you ever want to execute a possibly compromised piece of code. Instead use your installation manager with the command "apt list | grep liblzma".

Noooooooooooooooo the glowies got XZ utils too

is he Chinese ?

Lee William Martin Nancy Gonzalez Barbara

sus

Well to be perfectly honest, in my humble opinion, of course without offending anyone who thinks differently from my point of view, but also by looking into this matter in a different perspective and without being condemning of one’s view’s and by trying to make it objective, and by considering each and every one’s valid opinion, I honestly believe that I completely forgot what I was going to say.