Topic
Ssh
3 stories about Ssh that passed the news check, newest first.
Security ·
Dropbear: the restriction names an address — permitopen/permitlisten not enforced for unix-socket forwarding, docker.sock reachable (HEAD 99baf182, live-proven)
Dropbear's permitopen and permitlisten restrictions on SSH keys are not enforced for unix-socket forwarding.
Open Source Security
Security · High impact ·
Rucio: Unauthenticated administrator impersonation through SSH challenge tokens (CVE-2026-100397)
Rucio accepts SSH challenge tokens as valid credentials during authentication token validation.
GitHub Advisory Database
News · High impact ·
ChatGPT Desktop forwards your SSH agent to remote machines
ChatGPT Desktop forwards the local SSH agent to remote machines.
Hacker News: Front Page