Upstream is unimpressed: ‘This includes a fix for CVE-2020-16135, however
we do not see how this would be exploitable at all. If you find a
security bug in libssh please don’t just assign a CVE, talk to us first.’
* gnu/packages/ssh.scm (libssh): Update to 0.9.5.