Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

Debian 8: DLA-1500-2 Low Severity OpenSSH X11 Forwarding Fix

debian lts
Calendar Grey September 12, 2018
Dist Debian Esm H88
OpenSSH security patch resolves X11 forwarding vulnerability. Ensure that your openssh packages for Debian 8 are updated to mitigate these concerns.
The security update of OpenSSH announced as DLA 1500-1 introduced a bug in openssh-client: when X11 forwarding is enabled (via system-wide configuration in ssh_config or via -X com...
Topics%20covered

Topics Covered

security advisory debian bug fix patch low severity openssh x11 forwarding

Summary

CVE-2016-1908

OpenSSH mishandled untrusted X11 forwarding when the X server disables
the SECURITY extension. Untrusted connections could obtain trusted X11
forwarding privileges. Reported by Thomas Hoger.

For Debian 8 "Jessie", this problem has been fixed in version
1:6.7p1-5+deb8u7.

We recommend that you upgrade your openssh packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
low
Lowest
Low
Medium
High
Critical

<pre><font face="Courier">Package: openssh
Version: 1:6.7p1-5+deb8u7
Debian Bug: 908652

Topics%20covered

Topics Covered

security advisory debian bug fix patch low severity openssh x11 forwarding

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.