Announce: OpenSSH 9.3p2 released

Damien Miller djm at mindrot.org
Thu Jul 20 11:54:37 AEST 2023


On Wed, 19 Jul 2023, Christoph Anton Mitterer wrote:

> Hey.
> 
> On Wed, 2023-07-19 at 08:40 -0600, Damien Miller wrote:
> > via a forwarded agent socket if the following
> > conditions are met:
> 
> I assume this also means that when:
>   ForwardAgent=no
> respectively:
>   -a
> is used, one is not vulnerable?

You'd still be vulnerable to a local attack if they could get past the
filesystem permissions, however this is highly unlikely.

I'd recommend the workaround in the release notes though.


More information about the openssh-unix-dev mailing list