Description of changes The upstream tarball has been tampered with and includes a backdoor for which we cannot completely rule out, whether we are affected. https://www.openwall.com/lists/oss-secur...

I have managed to extract a list of encoded strings within the liblzma/xz backdoor payload (5.6.1): https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01 The code has a dictionary of strings ...