On Wed, Oct 17, 2018 at 12:47:26AM -0400, Mike Gerwitz wrote:
> On Tue, Oct 16, 2018 at 21:20:30 -0400, Christopher Lemmer Webber wrote:
> > https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/
> >
> > seems serious?
> 
> Very... Fortunately that's libssh and not OpenSSH[0], but with that said,
> it does appear to be packaged in Guix and there are a couple packages
> that use it.

Patch at <https://bugs.gnu.org/33067>