Re:OpenSSH: client bug CVE-2016-0777
by amatix on Thursday January 14, 2016 @10:19AM
(#10901867)
From the updated OP:
> The authentication of the server host key prevents exploitation by a man-in-the-middle, so this information leak is restricted to connections to malicious or compromised servers.
> The authentication of the server host key prevents exploitation by a man-in-the-middle, so this information leak is restricted to connections to malicious or compromised servers.