[yuumei]

Not sure why you are being downvoted, quote from the video "It's actually systemd's fault":

https://youtu.be/Q6ovtLdSbEA?feature=shared&t=1491

[Cloudef]

The real culprit is actually ifunc feature in the dynamic loader / glibc

[saagarjha]

The real culprit is the backdoor that got injected into an open source project.

[acdha]

Because it’s just another attempt by people who have emotional issues around systemd to derail a technical thread while adding nothing new or insightful. The people who actually work on these projects have been making efforts to reduce dependency depth and otherwise protect against a general class of attack which could have been used to target many other things, both users of liblzma and more broadly other popular projects with limited resources.