Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 499
Alerts This Week
Warning Icon 1 499

OpenSSH Security Update: Critical Fixes For Port Forwarding And GSSAPI

Calendar Sep 05, 2005 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

security advisory security update OpenSSH GSSAPI port forwarding network encryption
The first fix prevents "GatewayPorts" from being "incorrectly activated for dynamic ('-D') port forwardings when no listen address was explicitly specified," according to the changelog. The update also prevents GSSAPI credentials being "delegated to users who log in with methods other than GSSAPI authentication (e.g. public key) when the client requests it." The update also includes a host of bug fixes, improvements and added features according to the announcement.

Server shell (SSH) technology is used to encrypt network traffic that otherwise is relatively open to eavesdropping and attack. OpenSSH is one of the open source alternatives to proprietary secure shell software.

The link for this article located at Techtonic is no longer available.