2 ms·
Seems like it'll be a case of "wait for updated ssh packages", potentially with some mitigation advice appearing in the next day or so.
by justinclift 3y ago
Seems like it'll be a case of "wait for updated ssh packages", potentially with some mitigation advice appearing in the next day or so.
- 1letterunixname 3y agoNo. Mitigations were available for openssh before you wrote that comment. Follow the recommendations from ssh-audit (master version). [0] For packages, openssh and openssh-portable 9.6 include the fix, but every vendor will need to backport if they maintain their own pile of patches against a particular version of -portable. 0. https://github.com/jtesta/ssh-audit https://github.com/jtesta/ssh-audit
- justinclift 3y agoThanks, hadn't come across ssh-audit before. Looks like a good tool. :)