Watch the video:
Timestamps:
0:25 - Affected versions of xz
0:38 - Check if you have an affected xz package
0:50 - Check if Ubuntu/Debian has vulnerable xz
1:19 - Check if Alpine has vulnerable xz
1:30 - Check if Fedora has vulnerable xz
1:43 - Check if Kali has vulnerable xz
1:52 - Check if OpenSUSE has vulnerable xz
2:18 - Check if Arch has vulnerable xz
2:28 - Do you have a vulnerable xz version?
2:50 - Docker containers & other softwawre vulnerable?
3:12 - Updatingxz has been backdoored. As this is a supply-chain vulnerability: You are likely vulnerable if you’ve updated your Linux recently. If you have SSH enabled then you NEED to check if you’re vulnerable and either update or rollback right now! This video shows you how to do that.
See affected versions: https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/
