Thanks, and interesting info linked below (with explanation linked to here[1]) that made OpenSSH clients versions 5.4 to 7.1 vulnerable: > Although roaming is

Thanks, and interesting info linked below (with explanation linked to here[1]) that made OpenSSH clients versions 5.4 to 7.1 vulnerable: > Although roaming is not supported by the OpenSSH server, it is enabled by default in the OpenSSH client, and contains two vulnerabilities that can be exploited by a malicious SSH server (or a trusted but compromised server): an information leak (memory disclosure), and a buffer overflow (heap-based). [1] https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-077...