It’s 5.4.5, so “no, but it does not contain the known backdoor”. Both
Debian and Ubuntu are currently analysing what needs to be done.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to xz-utils in Ubuntu.
Public bug reported:
I can not find the apt amd64 version 2.7.14 on Ubuntu Noble. It seems apt only
exists for non-amd64 architecture:
https://packages.ubuntu.com/search?suite=noble=apt
noble (admin): commandline package manager
2.7.14: arm64 armhf i386 ppc64el riscv64 s390x
I can not find any
https://thehackernews.com/2024/03/urgent-secret-backdoor-found-in-
xz.html
Is "5.6.1+really5.4.5-1" secure now?
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to xz-utils in Ubuntu.
https://bugs.launchpad.net/bugs/2059417
*** This bug is a duplicate of bug 1922130 ***
https://bugs.launchpad.net/bugs/1922130
** This bug has been marked a duplicate of bug 1922130
Request addition of Fedora / Redhat "sftp-force-permissions" patch
--
You received this bug notification because you are a member of Ubuntu
Touch
Since this bug report was filed, there has been a security update of
gst-plugins-good1.0 in jammy which built successfully. Closing invalid.
** Changed in: gst-plugins-good1.0 (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch
I suggest including 2147483642 not in LTS, but in Ubuntu 24.10 as an
experiment. Because I noticed an unpleasant detail. For example, there
is a game "Don't Starve," I know there is a native version, but this is
just as an experiment with Proton. If you launch the Proton version, you
will receive
Public bug reported:
The error happens when I click on the last days of the calendar
ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: xorg 1:7.7+23ubuntu2
ProcVersionSignature: Ubuntu 6.5.0-26.26~22.04.1-generic 6.5.13
Uname: Linux 6.5.0-26-generic x86_64
ApportVersion: 2.20.11-0ubuntu82.5
It seems like 1:5.45-3 was deleted instead of 1:5.45-2? That resolves
the immediate issue, I guess, but it’s probably not the intended
resolution.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to file in Ubuntu.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: software-properties (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to software-properties in
Ubuntu.
Public bug reported:
It still uses old GTK 3. Please upgrade it to GTK 4!
** Affects: software-properties (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to
I had forgotten about this bug. Thanks for bringing this up and let me
close this.
** Changed in: xz-utils (Ubuntu)
Status: New => Invalid
** Description changed:
+ NOTE: THE VERSION MENTIONED HERE HAS BEEN BACKDOORED.
+ I am keeping the text below unchanged due to its possible
** Package changed: alsa-driver (Ubuntu) => firmware-sof (Ubuntu)
** Changed in: firmware-sof (Ubuntu)
Status: New => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to alsa-driver in Ubuntu.
The attachment "0001-Add-support-for-2024-ROG-Strix-G634JZR.patch" seems
to be a patch. If it isn't, please remove the "patch" flag from the
attachment, remove the "patch" tag, and if you are a member of the
~ubuntu-reviewers, unsubscribe the team.
[This is an automated message performed by a
I just read about the backdoor on xz-utils from CVE-2024-3094 (not yet
synced to Launchpad CVE, I can't use the Link to CVE feature) and I
wanted to know more about Ubuntu's status.
Please avoid syncing any vulnerable version.
** CVE added:
14 matches
Mail list logo
