Comment 17 for bug 1863930

Thank you for the detailed test case, rationale and security-team review of the patches! I have accepted those into bionic-proposed and added, for the time being, a block-proposed-bionic tag. I am still not sure about the severity of this bug.

As I don't work on the openssh package, I'd like to leave the decision to the Server and Security teams. Are there any other changes scheduled to be released shortly? Do you think it's worth releasing to -updates even now? From the SRU perspective I'm +0, since it always is a concern that many users will get the update, but on the other hand if a certain set of users is broken, medium prio bugs are also good to fix. If it's decided that we want it, please remove the block tag.