A backdoor in xz

I'm aware, but since the immediate upstream for most distributions is openssh-portable and that's who we report bugs to, I thought it likely that the other people talking about OpenSSH in this thread actually meant openssh-portable.