Edit: looks like 11.4 fixes another root exploit with details "probably next week" (is that an estimate for 10.13.5 then?) - https://twitter.com/i41nbeer/status/1001548232613421057
Reply on news.ycombinator.com