4 ms·

Summary: – The vulnerability allows a server you connect to to get the contents of the memory of the OpenSSH client. – If your keys are not protected by a pas

by rvern 11y ago

Summary: – The vulnerability allows a server you connect to to get the contents of the memory of the OpenSSH client. – If your keys are not protected by a passphrase or you do not use ssh-agent, this can include private keys. – OpenSSH 5.4 to 7.1 are affected. – You can mitigate this by adding "UseRoaming no" to /etc/ssh/ssh_config or ~/.ssh/config. – You should change your SSH keys.

bluegate010 11y ago
> If your keys are not protected by a passphrase Looks like the private key can be leaked regardless of the use of a passphrase, but you'd get the encrypted form that would need to be cracked offline.