[USN-7457-1] OpenSSH vulnerability

-----BEGIN PGP SIGNATURE-----
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=ESDZ
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7457-1
April 24, 2025

openssh vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

OpenSSH could allow unintended access to network services.

Software Description:
- openssh: secure shell (SSH) for secure access to remote machines

Details:

It was discovered that OpenSSH incorrectly handled the DisableForwarding
directive. The directive would fail to disable X11 and agent forwarding,
contrary to documentation and expectations.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
openssh-client 1:9.9p1-3ubuntu3.1
openssh-server 1:9.9p1-3ubuntu3.1

Ubuntu 24.10
openssh-client 1:9.7p1-7ubuntu4.3
openssh-server 1:9.7p1-7ubuntu4.3

Ubuntu 24.04 LTS
openssh-client 1:9.6p1-3ubuntu13.11
openssh-server 1:9.6p1-3ubuntu13.11

Ubuntu 22.04 LTS
openssh-client 1:8.9p1-3ubuntu0.13
openssh-server 1:8.9p1-3ubuntu0.13

Ubuntu 20.04 LTS
openssh-client 1:8.2p1-4ubuntu0.13
openssh-server 1:8.2p1-4ubuntu0.13

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7457-1
CVE-2025-32728

Package Information:
https://launchpad.net/ubuntu/+source/openssh/1:9.9p1-3ubuntu3.1
https://launchpad.net/ubuntu/+source/openssh/1:9.7p1-7ubuntu4.3
https://launchpad.net/ubuntu/+source/openssh/1:9.6p1-3ubuntu13.11
https://launchpad.net/ubuntu/+source/openssh/1:8.9p1-3ubuntu0.13
https://launchpad.net/ubuntu/+source/openssh/1:8.2p1-4ubuntu0.13