@chris Note that by doing this, you're actually running xz, a binary which the attacker has had under their control for years, and which may include more malware than we currently know about.
It has not yet been analyzed fully. Versions older than 5.6 might have been manipulated, too. We don't know yet.
This is bad advice.
The correct way to check would be to ask your package manager which version is installed.
Add comment