Security Update from MAC breaks ssh -X
Damien Miller
djm at mindrot.org
Tue Mar 20 10:32:48 EST 2007
On Mon, 19 Mar 2007, William Ahern wrote:
> On Tue, Mar 20, 2007 at 09:25:49AM +1100, Darren Tucker wrote:
> > This has been the default for years, I don't know why you're only seeing
> > problems now (unless Apple used to change the default in their packages
> > and now don't?)
>
> For one thing, Apple hasn't updated their version of OpenSSH for years.
> Which patches they backport is anyone's guess. They certainly haven't
> backported control socket mastering.
... and I don't recall them having contributed anything back either.
Apple ship patches on top of OpenSSH that change its behaviour in
other ways too. I just compile my own OpenSSH on for OS X and use that,
this way I get a recent and well-behaved version.
-d
More information about the openssh-unix-dev
mailing list