Everyone running a rolling release should look into it. On Debian Testing there's already an upgrade that is actually a downgrade for xz and liblzma that's called "5.6.1+really5.4.5-1" For more info: https://news.ycombinator.com/item?id=39865810