CVE-2025-32728
Publication date 11 April 2025
Last updated 11 April 2025
Ubuntu priority
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| openssh | 24.10 oracular |
Vulnerable
|
| 24.04 LTS noble |
Vulnerable
|
|
| 22.04 LTS jammy FIPS Updates |
Vulnerable
|
|
| 20.04 LTS focal FIPS Updates |
Vulnerable
|
|
| 18.04 LTS bionic FIPS Updates |
Vulnerable
|
|
| 16.04 LTS xenial FIPS Updates |
Not affected
|
|
| 14.04 LTS trusty |
Not affected
|
|
| openssh-ssh1 | 24.10 oracular | Ignored |
| 24.04 LTS noble | Ignored | |
| 22.04 LTS jammy | Ignored | |
| 20.04 LTS focal | Ignored | |
| 18.04 LTS bionic |
Needs evaluation
|
Notes
mdeslaur
openssh-ssh1 is only provided for compatibility with old devices that cannot be upgraded to modern protocols. We will not be providing any security support for the openssh-ssh1 package as it is insecure and should be used in trusted environments only. The DisableForwarding option was introduced in 7.4