[ASA-202403-1] xz: arbitrary code execution

The malicious code path does not exist in the arch version of sshd, as it does not link to liblzma. 



However, out of an abundance of caution, we advise users to avoid the vulnerable code in their system as it is possible it could be triggered from other, un-identified vectors.