Release of OpenSSH 9.2 addressing a vulnerability that manifests before authentication
The release of OpenSSH 9.2 has been announced, which is the open implementation of the client and server for SSH 2.0 and SFTP protocols. The new version fixes a vulnerability that could lead to double memory deallocation before passing authentication. Only OpenSSH 9.1 is affected by this vulnerability; earlier versions do not exhibit this problem. To trigger the vulnerability, it is sufficient to change the SSH client banner […]
