tocsin

Alpine/openssh: low 3.7

An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to

Action: Upgrade openssh to 8.9_p1-r0 or later.

Affected

introducedfixedlast affected
08.9_p1-r0-

Fixed versions

8.9_p1-r0

Sources

published · modified · JSON