@realman543 @kirby @ExtraSpecialK
sshd with systemd support is how it was discovered, we still don't know if it's the only use case that might be affected. It's still not safe to assume that other software depending on liblzma isn't compromised as no one did the source code audit proper.
Even very old versions, e.g. 5.2.x might be affected, as this "person" was with the project for quite some time.

So I won't panic that much, we're all fucked anyway 😊