Embed Notice

@alpinelinux @rnd that does not look right; before the commit made 4 hours ago, you were using the same affected tarballs: https://gitlab.alpinelinux.org/alpine/aports/-/commit/982d2c6bcbbb579e85bb27c40be84072ca0b1fd9

the switch has introduced another problem and that's a build-time depcycle (xz->gettext->libxml2->xz) - which is the primary reason we have not switched (pregenerated autotools files solve that)

that said, there is no difference otherwise, since the malicious condition does *not* trigger even with the upstream release tarball