CVE-2017-9078: double-free in server TCP listener cleanup CVE-2017-9079: information disclosure with ~/.ssh/authorized_keys symlink.