[CentOS] Fwd: Heads up: OpenSSH users (CentOS 7+)

Tony Mountifield tony at softins.co.uk
Thu Jan 14 16:54:18 UTC 2016


In article <5697CAB8.6090703 at wemoto.com>, Michael H <michael at wemoto.com> wrote:
> Probably worth a read...
> 
> http://www.openssh.com/txt/release-7.1p2
> 
> > Important SSH patch coming soon.  For now, everyone on all operating
> > systems, please do the following:
> >
> > Add undocumented "UseRoaming no" to ssh_config or use "-oUseRoaming=no"
> > to prevent upcoming #openssh client bug CVE-2016-0777. More later.
> 
> echo "UseRoaming no" >> /etc/ssh/ssh_config

It says this applies to OpenSSH 5.4 to 7.1.

So it would only affect CentOS7 and up, as C6 uses openssh-5.3.

Cheers
Tony
-- 
Tony Mountifield
Work: tony at softins.co.uk - http://www.softins.co.uk
Play: tony at mountifield.org - http://tony.mountifield.org



More information about the CentOS mailing list