@TheBlueMatt (Matt Corallo) on Twitter: "Looks like someone managed to get a backdoor into ssh in Fedora and Debian testing. Patch systems ASAP."
https://openwall.com/lists/oss-security/2024/03/29/4
latest release is affeced 5.6.1, there is not release with fix available. idk if master brannch has fix or not.
https://github.com/tukaani-project/xz/releases