This one may be of interest for those using Open SSH

Make sure your SSH is up to date!


Ideally, these become public knowledge after the fix has been pushed out. It's a matter of responsible disclosure. The good ones find a security issue and let the project know in private. They then wait. If the fix isn't sent out in time, they disclose the bug to the world. Otherwise, the bug is disclosed after they've shipped a fix for it.

I apply updates any time I see them, even if it would interrupt my workflow.
Hi KGIII you may want to move this to security as That is where I meant to post it. But mistakenly posted to general.

Staff online