3 ms·
This is exploitable in the latest Archlinux 2023.02.01. Also, this doesn't require enabling old key exchange algorithms.
by uraid 4y ago
This is exploitable in the latest Archlinux 2023.02.01.
Also, this doesn't require enabling old key exchange algorithms.
- herpderperator 4y agoWhat does "the latest Arch Linux" mean? Arch Linux is a rolling distribution. It was patched in the repository on 2023-02-02[0]. [0] https://archlinux.org/packages/core/x86_64/openssh/ https://archlinux.org/packages/core/x86_64/openssh/
- saghm 4y agoI assume they mean the latest version available for download as an .iso, since I think that tends to happen around monthly. I agree that this isn't super concerning though, since even installing from that would result in an up-to-date system, and there isn't much reason to ssh to or from the live disk.