[ASA-202204-8] xz: arbitrary command execution

An attacker is able to provide malicious filenames to write to arbitrary files or execute arbitrary commands on the affected host.