bump(packages/liblzma): 5.6.1+really5.4.5

Fixes CVE-2024-3094

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3094
- https://www.openwall.com/lists/oss-security/2024/03/29/4
- https://lists.debian.org/debian-security-announce/2024/msg00057.html
- https://security-tracker.debian.org/tracker/source-package/xz-utils
- https://tracker.debian.org/pkg/xz-utils
- https://tracker.debian.org/news/1515519/accepted-xz-utils-561really545-1-source-into-unstable/
- https://sources.debian.org/src/xz-utils/5.6.1%2Breally5.4.5-1/
- https://salsa.debian.org/debian/xz-utils

packages/liblzma/build.sh

@@ -3,9 +3,9 @@ TERMUX_PKG_DESCRIPTION="XZ-format compression library"
 TERMUX_PKG_LICENSE="LGPL-2.1, GPL-2.0, GPL-3.0"
 TERMUX_PKG_LICENSE_FILE="COPYING, COPYING.GPLv2, COPYING.GPLv3, COPYING.LGPLv2.1"
 TERMUX_PKG_MAINTAINER="@termux"
-TERMUX_PKG_VERSION="5.6.1"
-TERMUX_PKG_SRCURL=https://github.com/tukaani-project/xz/releases/download/v${TERMUX_PKG_VERSION}/xz-${TERMUX_PKG_VERSION}.tar.xz
-TERMUX_PKG_SHA256=f334777310ca3ae9ba07206d78ed286a655aa3f44eec27854f740c26b2cd2ed0
+TERMUX_PKG_VERSION="5.6.1+really5.4.5"
+TERMUX_PKG_SRCURL=http://ftp.debian.org/debian/pool/main/x/xz-utils/xz-utils_$TERMUX_PKG_VERSION.orig.tar.xz
+TERMUX_PKG_SHA256=da9dec6c12cf2ecf269c31ab65b5de18e8e52b96f35d5bcd08c12b43e6878803
 TERMUX_PKG_AUTO_UPDATE=true
 TERMUX_PKG_BREAKS="liblzma-dev"
 TERMUX_PKG_REPLACES="liblzma-dev"