backdoor in upstream xz/liblzma leading to ssh server compromise

This is a fun one we're gonna be hearing about for a while...

It's fortunate it was discovered before any major releases of non-rolling-release distros were cut, but damn.