Announce: OpenSSH 9.3p2 released
Damien Miller
djm at mindrot.org
Thu Jul 20 11:54:37 AEST 2023
On Wed, 19 Jul 2023, Christoph Anton Mitterer wrote:
> Hey.
>
> On Wed, 2023-07-19 at 08:40 -0600, Damien Miller wrote:
> > via a forwarded agent socket if the following
> > conditions are met:
>
> I assume this also means that when:
> ForwardAgent=no
> respectively:
> -a
> is used, one is not vulnerable?
You'd still be vulnerable to a local attack if they could get past the
filesystem permissions, however this is highly unlikely.
I'd recommend the workaround in the release notes though.
More information about the openssh-unix-dev
mailing list