@mgorny In fact I'm glad it was a fairly recent xz release because otherwise we'd have to patch a ton of things because de-vendoring is hard (like kernel isn't de-vendored so some people checked it's copy of xz).