Summary:

– The vulnerability allows a server you connect to to get the contents of the memory of the OpenSSH client.

– If your keys are not protected by a passphrase or you do not use ssh-agent, this can include private keys.

– OpenSSH 5.4 to 7.1 are affected.

– You can mitigate this by adding "UseRoaming no" to /etc/ssh/ssh_config or ~/.ssh/config.

– You should change your SSH keys.