OpenSSH versions 6.8 and below suffer from an issue where malicious servers, if a client connected to them using ssh -X, could connect to the SSH client's X server without being subject to X11 SECURITY restrictions.
b93cb274db294b1b58ca10d241e66406513c14742a39c0415077a90eff4dcd5b