The xz thing never managed to hit production versions of the affected distros. You had to use testing or similar pre production releases to get hit by it.