1. Forum
  2. Usenet
  3. COMP.UNIX.BSD.OPENBSD.ANN

  • ssh roaming

    From Ted Unangst@21:1/5 to All on Sat Jan 16 01:55:01 2016
    Qualys Security identified vulnerabilities in the ssh client roaming feature. In the default configuration, this could potentially leak client keys to a hostile server.

    https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt

    There are patches to disable the roaming feature, and it has been removed from the source tree.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)