Summary
It was discovered that OpenSSH incorrectly handled the DisableForwarding
directive. The directive would fail to disable X11 and agent forwarding,
contrary to documentation and expectations.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | openssh | 1:8.2p1-4ubuntu0.13 |
| Ubuntu · 22.04 LTS 22.04:LTS | openssh | 1:8.9p1-3ubuntu0.13 |
| Ubuntu · 24.04 LTS 24.04:LTS | openssh | 1:9.6p1-3ubuntu13.11 |
Vulnerabilities 1
-
Medium 4.3
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it di…
References
-
report
https://ubuntu.com/security/CVE-2025-32728