[knocte]

But to be a victim of this vulnerability you need to have one of the hosts already compromised AFAIU, so I don't think it's that severe.

[brianwawok]

Any exploit that turns a 1 host hack into hack entire data enter with root access seems worth a patch....