Transport Tycoon Forums

Unfortunately due to the xz ultilities backdoor that has exposed many computer systems around the globe, OpenTTD 14 is indefinitely delayed.

OpenTTD utilizes the libxzma library to help compress data in the game. This library, in turn, depends on the xz utility. The backdoor was quietly implanted in the last two source code releases of xz, and any OS, library or other software which used this source code is thus compromised, and vendors have locked it down. The xz repository on GitHub is currently closed while GitHub investigates the incident, so it's not possible for other software packages and developers to continue using it until the repository is reopened and a fix is published and verified.

Until then, continue testing the 14.0-RC3 release and reporting any bugs over on Github. The more people we have playing it, the more perfect we can help make it!

Why not just downgrade the xz dependency to a known clean version?

Official word from Frosch, via Reddit:

---
The official OpenTTD 14.0-RC3 binaries were all compiled with liblzma 5.4.4. You can check this by looking at "Game Options" > "Preview survey result": near the bottom you will find a "libraries" section, which lists the used versions of various dependencies.

So far the xz news claim:
* Only version 5.6.0 and 5.6.1 are affected. (OpenTTD uses older versions)
* The backdoor only targets the SSH-server, not OpenTTD.

So far you should be safe

Right now, access to all liblzma versions is locked (also old ones), so OpenTTD cannot be compiled/released.

Once the good versions of liblzma are available again, OpenTTD can be released again.

There was never a promised release date, so how can it be delayed?

peter1138 wrote: ↑03 Apr 2024 11:56 There was never a promised release date, so how can it be delayed?

Usually, updates are coming out in April. Info about the delay probably means it won't be coming this month.

peter1138 wrote: ↑03 Apr 2024 11:56 There was never a promised release date, so how can it be delayed?

Well, not promised but hinted (last sentence at the bottom), so it was expected...

OpenTTD 14 is now released.
viewtopic.php?t=91634

kamnet wrote: ↑13 Apr 2024 14:20OpenTTD 14 is now released.

Hmmm, where is the "like" button?