btw I'm unaffected by the xz/lzma-utils backdoor, the only x86_64*linux-gnu machine I still have doesn't uses 5.6.0+ and doesn't uses gcc (and even then it would be CC=${CHOST}-gcc not CC=gcc as that would lead to a "command not found").