Xz package contains a vulnerability

Support Software & Applications
38

Downgrading to xz 5.4.6 (lib32-xz also) ( till beginning of March in Manjaro Stable ) would be another way instead of updating?