CVE-2016-0777

OpenSSH: client bug CVE-2016-0777

Verificare se si è vulnerabili:

$ ssh localhost -v 2>&1 1>/dev/null | grep -i roaming
debug1: Roaming not allowed by server

user@localhost's password:

In caso affermativo disattivare il roaming:

 # echo 'UseRoaming no' >> /etc/ssh/ssh_config

Controllo:

$ ssh localhost -v 2>&1 1>/dev/null | grep -i roaming
l3@localhost's password:

Finito.