
Debian LTS: DLA-3532-1: openssh security update
It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote attacker could possibly use this issue to load arbitrary libraries from the user¢''s system and execute arbitrary code.