On a fresh Craft installation I want to get the KDE framework. While doing this I noticed that the liblzwma is outdated: *** Action: fetch for win32libs/liblzma *** wget http://tukaani.org/xz/xz-5.0.5.tar.xz Looking at https://tukaani.org/xz/ I see that version 5.0.5 was released 4 years a go and that version 5.2.3 is the current release. I expect some security issues in old releases so craft should use a newer version. If this it not a craft bug please tell me that I can report id to the appropriate project.
Fixed in april https://github.com/KDE/craft-blueprints-kde/commit/5bc31fcb4a9740b0e5ea8aa37d2543e0eed3e62a