| commit | ea24d4f2298bf4838ac6437d7cc653a60fa97d91 | |
| author | Matthew Dillon <dillon@apollo.backplane.com> | |
| Thu, 14 Jan 2016 17:06:23 +0000 (14 09:06 -0800) | ||
| committer | Matthew Dillon <dillon@apollo.backplane.com> | |
| Thu, 14 Jan 2016 17:06:23 +0000 (14 09:06 -0800) | ||
| tree | d6bb51ec972b91af9abbf94a7fc16cc614f27be3 | treesnapshot (tar.gz zip) |
| parent | 3d93eee4133490417bf1e1cc4570acf452449f8e | commitdiff |
ssh - Remove undocumented roaming support CVE-2016-0777 CVE-2016-0778
* Remove client-side 'roaming' feature as per openbsd patch.
* CVE-2016-0777 CVE-2016-0778. A malicious server can trick the client
into potentially leaking key material.
* Remove client-side 'roaming' feature as per openbsd patch.
* CVE-2016-0777 CVE-2016-0778. A malicious server can trick the client
into potentially leaking key material.
| crypto/openssh/readconf.c | diffblobblamehistory | |
| crypto/openssh/ssh.c | diffblobblamehistory |