Package: openssh-client Version: 1:7.1p1-6 Severity: critical Tags: security Justification: root security hole
Hey. You probably know about this already, but just in case not: https://lists.mindrot.org/pipermail/openssh-unix-dev/2016-January/034679.html Cheers, Chris. -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.3.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages openssh-client depends on: ii adduser 3.113+nmu3 ii dpkg 1.18.4 ii libc6 2.21-6 ii libedit2 3.1-20150325-1+b1 ii libgssapi-krb5-2 1.13.2+dfsg-4 ii libselinux1 2.4-3 ii libssl1.0.2 1.0.2e-1 ii passwd 1:4.2-3.1 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages openssh-client recommends: ii xauth 1:1.0.9-1 Versions of packages openssh-client suggests: pn keychain <none> pn libpam-ssh <none> pn monkeysphere <none> pn ssh-askpass <none> -- Configuration Files: /etc/ssh/ssh_config changed [not included] -- no debconf information
