<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Manjaro and I'm assuming the upstream Arch team pushed an update
over the past few hours too.<br>
<br>
<a class="moz-txt-link-freetext" href="https://lists.manjaro.org/pipermail/manjaro-security/2016-January/000026.html">https://lists.manjaro.org/pipermail/manjaro-security/2016-January/000026.html</a><br>
<pre class="moz-signature" cols="72">From:
Sandeep Johri</pre>
<div class="moz-cite-prefix">On 14/01/16 12:04 PM, Khalid Baheyeldin
wrote:<br>
</div>
<blockquote
cite="mid:CA+TuoW1LYkC_07-+pAyeBeZ0J8cW694UjtVTarxj379eHiN6Lw@mail.gmail.com"
type="cite">
<div dir="ltr">Ubuntu just pushed an update a couple of hours
earlier today.<br>
<br>
SECURITY UPDATE: information leak and overflow in roaming
support<br>
- debian/patches/CVE-2016-077x.patch: completely disable
roaming option<br>
in readconf.c.<br>
- CVE-2016-0777<br>
- CVE-2016-0778<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jan 14, 2016 at 11:03 AM, L.D.
Paniak <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:ldpaniak@fourpisolutions.com" target="_blank">ldpaniak@fourpisolutions.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> Apparently there is a
bug in OpenSSH client in recent distributions.<br>
Until a patch is pushed through the usual package
management <br>
routes, the following ssh client configuration change is
recommended:<br>
<br>
<span
style="color:rgb(0,0,0);font-family:monospace;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline!important;float:none">echo
'UseRoaming no' >> /etc/ssh/ssh_config</span><br
style="color:rgb(0,0,0);font-family:monospace;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<br>
Affects all OpenSSH 5.4 - 7.1 (Ubuntu 12.04+).<br>
<br>
<a moz-do-not-send="true"
href="http://undeadly.org/cgi?action=article&sid=20160114142733"
target="_blank">http://undeadly.org/cgi?action=article&sid=20160114142733</a><br>
<br>
Happy patching!<br>
Lori<br>
</div>
<br>
_______________________________________________<br>
kwlug-disc mailing list<br>
<a moz-do-not-send="true" href="mailto:kwlug-disc@kwlug.org">kwlug-disc@kwlug.org</a><br>
<a moz-do-not-send="true"
href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org"
rel="noreferrer" target="_blank">http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div class="gmail_signature">Khalid M. Baheyeldin<br>
<a moz-do-not-send="true" href="http://2bits.com"
target="_blank">2bits.com</a>, Inc.<br>
Fast Reliable Drupal<br>
Drupal optimization, development, customization and
consulting.<br>
Simplicity is prerequisite for reliability. -- Edsger
W.Dijkstra<br>
Simplicity is the ultimate sophistication. -- Leonardo da
Vinci<br>
For every complex problem, there is an answer that is clear,
simple, and wrong." -- H.L. Mencken<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
kwlug-disc mailing list
<a class="moz-txt-link-abbreviated" href="mailto:kwlug-disc@kwlug.org">kwlug-disc@kwlug.org</a>
<a class="moz-txt-link-freetext" href="http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org">http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org</a>
</pre>
</blockquote>
<br>
</body>
</html>