Linuxban eltüntették az ssh-keysign-pwn sebezhetőséget, amely lehetővé tette a helyi felhasználók számára a root fájlok olvasását
A Linux kernel vulnerability, unofficially named ssh-keysign-pwn, has been fixed. The issue allows a local unprivileged user to read files that should only be accessible to root, including private SSH host keys and, in certain scenarios, /etc/shadow. At the time of publication, a separate CVE for the issue has not yet been assigned. Despite the name, this is not a bug in OpenSSH as a network server […]