Discussion:
Error in 7.1p2 announcement?
(too old to reply)
Colin Watson
2016-01-14 15:23:08 UTC
Permalink
The 7.1p2 announcement (http://www.openssh.com/txt/release-7.1p2) says:

* SECURITY: Eliminate the fallback from untrusted X11-forwarding
to trusted forwarding for cases when the X server disables
the SECURITY extension. Reported by Thomas Hoger.

However, as far as I can see, this change is not in the V_7_1_P2 tag in
git, or in the released tarball.

Thanks,
--
Colin Watson [***@debian.org]
Markus Friedl
2016-01-14 18:33:27 UTC
Permalink
Thanks, it was decided last minute to not include it.

I'll update the web page.
Post by Colin Watson
* SECURITY: Eliminate the fallback from untrusted X11-forwarding
to trusted forwarding for cases when the X server disables
the SECURITY extension. Reported by Thomas Hoger.
However, as far as I can see, this change is not in the V_7_1_P2 tag in
git, or in the released tarball.
Thanks,
--
_______________________________________________
openssh-unix-dev mailing list
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
Loading...