backdoor in upstream xz/liblzma leading to ssh server compromise

And you know what? Doing updates once a week saved me from updating to this version :)