3 ms·
The OpenSSH security page has more useful information and a link to the advisory (posted last November). http://www.openssh.com/security.html http://www.openss
by blogimus 17y ago
The OpenSSH security page has more useful information and a link to the advisory (posted last November).
http://www.openssh.com/security.html http://www.openssh.com/security.html
Would have been nice for the zdnet article to provide a link to it.
- rythie 17y agoOn: http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt It says: "The most straightforward solution is to use CTR mode instead of CBC mode, since this renders SSH resistant to the attack." there is also this page: http://www.openssh.com/txt/cbc.adv http://www.openssh.com/txt/cbc.adv both one level down from that one.