Catching up on the detailed background to the xz compromise. This is a good summary (with links to the detail) of the long play here. https://boehs.org/node/everything-i-know-about-the-xz-backdoor