OK hopefully the last comment from me on xz as i believe we are sorted, if you want to confirm the package version installed to ensure its the patched version '5.6.1-2' (see https://security.archlinux.org/ASA-202403-1), then do the following:-
open unraid webui and left click container and select 'Console'
copy and paste the following command:-
pacman -Q | grep 'xz'
confirm the returned value is 'xz 5.6.1-2', if not please post here the image name so i can investigate.
Note:- If you are using an archived image then this will not be patched, also if you are using a tagged image then again this will not be patched.