Debian: DSA-5649-1: xz-utils security update

Andres Freund discovered that the upstream source tarballs for xz-utils, the XZ-format compression utilities, are compromised and inject malicious code, at build time, into the resulting liblzma5 library.

build code compression compromised debian dsa inject library malicious security security update update upstream utilities