14 Jan
2016
14 Jan
'16
3:10 p.m.
On 14/01/16 17:54, Tony Mountifield wrote:
In article 5697CAB8.6090703@wemoto.com, Michael H michael-YC1br6QyVKfQT0dZR+AlfA@public.gmane.org wrote:
Probably worth a read...
http://www.openssh.com/txt/release-7.1p2
Important SSH patch coming soon. For now, everyone on all operating systems, please do the following:
Add undocumented "UseRoaming no" to ssh_config or use "-oUseRoaming=no" to prevent upcoming #openssh client bug CVE-2016-0777. More later.
echo "UseRoaming no" >> /etc/ssh/ssh_config
It says this applies to OpenSSH 5.4 to 7.1.
So it would only affect CentOS7 and up, as C6 uses openssh-5.3.
https://access.redhat.com/articles/2123781
--
Kind Regards, Markus Falb