disableforwarding

OpenSSH’s behavior bug tracked as CVE‑2025‑32728 — where sshd’s DisableForwarding directive failed to reliably disable X11 and agent forwarding in releases prior to OpenSSH 10.0 — is real, fixed upstream, and important to treat as a supply‑chain and configuration risk rather than a...