A security problem exists with all versions of OpenSSH prior to 2.3.0 with regards to the X11 forwarding and ssh-agent . A new version of OpenSSH deals with this security issue.
Credit: Linux Mandrake Security Team , Debian security announce and TSL Team .
If agent or X11 forwarding is disabled in the SSH client configuration, the client does not request these features during session setup. However, when the SSH client receives an actual request asking for access to the ssh-agent, the client fails to check whether this feature has been negotiated during session setup. The client does not check whether the request complies with the client configuration and grants access to the SSH-agent. A similar problem exists in the X11 forwarding implementation. Patch: Debian GNU/Linux 2.2 alias potato Source archives: http://security.debian.org/dists/stable/updates/main/source/openssh_1.2.3-9.1.diff.gz http://security.debian.org/dists/stable/updates/main/source/openssh_1.2.3-9.1.dsc http://security.debian.org/dists/stable/updates/main/source/openssh_1.2.3.orig.tar.gz Architecture impendent archives: http://security.debian.org/dists/stable/updates/main/binary-all/ssh-askpass-ptk_1.2.3-9.1_all.deb Alpha architecture: http://security.debian.org/dists/stable/updates/main/binary-alpha/ssh-askpass-gnome_1.2.3-9.1_alpha.deb http://security.debian.org/dists/stable/updates/main/binary-alpha/ssh_1.2.3-9.1_alpha.deb ARM architecture: http://security.debian.org/dists/stable/updates/main/binary-arm/ssh-askpass-gnome_1.2.3-9.1_arm.deb http://security.debian.org/dists/stable/updates/main/binary-arm/ssh_1.2.3-9.1_arm.deb Intel ia32 architecture: http://security.debian.org/dists/stable/updates/main/binary-i386/ssh-askpass-gnome_1.2.3-9.1_i386.deb http://security.debian.org/dists/stable/updates/main/binary-i386/ssh_1.2.3-9.1_i386.deb Motorola 680x0 architecture: http://security.debian.org/dists/stable/updates/main/binary-m68k/ssh-askpass-gnome_1.2.3-9.1_m68k.deb http://security.debian.org/dists/stable/updates/main/binary-m68k/ssh_1.2.3-9.1_m68k.deb PowerPC architecture: http://security.debian.org/dists/stable/updates/main/binary-powerpc/ssh-askpass-gnome_1.2.3-9.1_powerpc.deb http://security.debian.org/dists/stable/updates/main/binary-powerpc/ssh_1.2.3-9.1_powerpc.deb Mandrake: Linux-Mandrake 7.0: Linux-Mandrake 7.1: Linux-Mandrake 7.2: Trustix: http://www.trustix.net/download/Trustix/updates/1.1/RPMS/ ftp://ftp.trustix.com/pub/Trustix/updates/1.1/RPMS/
Please enable JavaScript to view the comments powered by Disqus.
blog comments powered by
