diff -u openssh-4.3p2/channels.c openssh-4.3p2/channels.c --- openssh-4.3p2/channels.c +++ openssh-4.3p2/channels.c @@ -2807,9 +2807,6 @@ debug2("bind port %d: %.100s", port, strerror(errno)); close(sock); - if (ai->ai_next) - continue; - for (n = 0; n < num_socks; n++) { close(socks[n]); } diff -u openssh-4.3p2/debian/changelog openssh-4.3p2/debian/changelog --- openssh-4.3p2/debian/changelog +++ openssh-4.3p2/debian/changelog @@ -1,3 +1,13 @@ +openssh (1:4.3p2-8ubuntu1.1) feisty; urgency=low + + * Patch from Red Hat / Fedora: + - SECURITY: Don't use X11 forwarding port which can't be bound on all + address families, preventing hijacking of X11 forwarding by + unprivileged users when both IPv4 and IPv6 are configured (LP: #210175) + + + -- Nicolas Valcárcel Tue, 01 Apr 2008 10:31:58 -0500 + openssh (1:4.3p2-8ubuntu1) feisty; urgency=low * Resynchronise with Debian. Remaining changes: