@hazlin from what I understood, it affects the distros that patch lzma support into openssh for soystemd notification. From that mailing list:
openssh does not directly use liblzma. However debian and several other distributions patch openssh to support systemd notification, and libsystemd does depend on lzma.So whichever distros (including debian) doing this are fucked.
>MX-Linux only provides 5.2.5
You're safe lol