CVE-2025-32728 Information

Description

In sshd in OpenSSH before 10.0 the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Reference

https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367 https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html https://www.openssh.com/txt/release-10.0 https://www.openssh.com/txt/release-7.4