[liblzma] Build error on arm64-android about vcpkg

[AaronRM]

Seeing this on other platforms too. Vcpkg is attempting to download a tarball from the xz Utils repo which was disabled due to a supply chain attack.

[AaronRM]

Primary discussion is at #37839

[rezzeted]

@AaronRM I can’t understand when the repository will be restored? Nowadays a lot of libraries depend on liblzma; they cannot be build.

[AaronRM]

@strelokndv Agree :) I'm not a vcpkg maintainer. I only commented and +1'ed as a project I maintain was similarly affected. You could ask the vcpkg maintainers on the main issue: #37839.

[rezzeted]

@AaronRM tnx for answer. I was search information about restore xz repos and can't find it. That's why I asked on you.
The only solution I could find was to use the bminor/xz mirror. As far as I can tell, this version still contains a vulnerability.

[Cheney-W]

Duplicate of #37893