Summary of XZ Backdoor Impact

  • The XZ Backdoor primarily affects RPM and Deb packages.
  • Fedora based distributions and Souza implementations were affected.
  • Debian is affected if you're running unstable or SID.
  • CI Linux was affected but has an update now.
  • Arch was not affected as it never linked lib lzma to SSH.
  • The backdoor requires you to expose SSH, which should not be done.
  • Very few people were actually affected by this backdoor.

via XZ Backdoor is NOT that bad!