More now: http://www.openssh.com/txt/release-7.1p2 …https://twitter.com/msfriedl/status/687635945642967040 …
Add undocumented "UseRoaming no" to ssh_config or use "-oUseRoaming=no" to prevent upcoming #openssh client bug CVE-2016-0777. More later.
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@msfriedl could you provide a brief explanation on what this CVE is about? -
@part1zan_ that is the "more later" part ;)
End of conversation
New conversation -
-
-
@msfriedl it does leave the question of why an undocumented feature is enabled by default.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@msfriedl is there a way to test out from CLI easily to make sure the patch is effective? A bit like the shellshock test? Thanks!Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
New conversation
-
-
-
@msfriedl, found enough info to support. Thanks.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@msfriedl, I can't talk about it but add an undocumented setting to your ssh config?Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.