USN-7457-1: OpenSSH vulnerability
It was discovered that OpenSSH incorrectly handled the DisableForwarding directive. The directive would fail to disable X11 and agent forwarding, contrary to documentation and expectations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7457-1?
The severity of USN-7457-1 is considered to be high due to the incorrect handling of the DisableForwarding directive in OpenSSH.
How do I fix USN-7457-1?
To fix USN-7457-1, upgrade your OpenSSH packages to the patched versions 1:9.9p1-3ubuntu3.1 or later.
What versions of OpenSSH are affected by USN-7457-1?
USN-7457-1 affects OpenSSH client and server versions prior to 1:9.9p1-3ubuntu3.1 across various Ubuntu releases.
What systems are impacted by USN-7457-1?
USN-7457-1 impacts Ubuntu systems running versions 25.04, 24.10, 24.04, 22.04, and 20.04 with vulnerable OpenSSH installations.
Is the vulnerability in USN-7457-1 exploitable?
Yes, the vulnerability in USN-7457-1 can be exploited to enable unintended X11 and agent forwarding, posing a security risk.