not a lot. first need MITM, and that's not trivial. next need to be running to asyncssh (which has a straight-up bug in its state machine). next need to be r

not a lot. first need MITM, and that's not trivial. next need to be running to asyncssh (which has a straight-up bug in its state machine). next need to be running specific ciphers which use the ssh packet sequence number in their IV. it is a moderate big deal because it's a protocol flaw, not just a bug. so the openssh "patch" actually introduces a new protocol option, which doesn't help unless both sides select it.