topic Re: OpenSSH updated! in Firewall and Security Management

OpenSSH updated!

Bob_Zimmerman — Thu, 10 Sep 2020 14:06:41 GMT

I just noticed R80.40 jumbo 77 has OpenSSH_7.8p1! Not sure when it was updated, but that's great news!

Re: OpenSSH updated!

Danny — Thu, 10 Sep 2020 14:08:20 GMT

Absolutely! Thanks for the heads up. 👍

Re: OpenSSH updated!

PhoneBoy — Thu, 10 Sep 2020 14:15:54 GMT

Did we update it as part of the JHF or is it there in the R80.40 base as well?
I know we updated it on R80.40 in general but don’t remember exactly what version.
Will have to check.

I suspect our less modern Linux kernel in previous releases made updating some of the userspace applications like OpenSSH more problematic, which is why it hadn’t been done until R80.40.

Re: OpenSSH updated!

Bob_Zimmerman — Thu, 10 Sep 2020 14:26:52 GMT

My company mostly runs R80.20 at the moment, which I knew used 4.3p2. I was asked something about pulling files from a management via SFTP. Went to check on my personal box (running R80.40 jumbo 77) and noticed options in the sshd_config which were not available in 4.3p2, then checked the version. I don't have any other 3.10 boxes handy to check.

Re: OpenSSH updated!

Bob_Zimmerman — Thu, 10 Sep 2020 14:36:59 GMT

Tasty, tasty ECC support! I can finally start using P521 keys instead of RSA.

Re: OpenSSH updated!

John_Fleming — Thu, 10 Sep 2020 14:41:46 GMT

Its base on my MDS. (3.10 kernel) - no jumbo hotfixes installed.

Re: OpenSSH updated!

Danny — Thu, 10 Sep 2020 15:02:59 GMT

Watch out for these little buggers with the new SSH: sk168773

Re: OpenSSH updated!

Bob_Zimmerman — Thu, 10 Sep 2020 15:25:57 GMT

I wasn't aware anybody still used those. OpenBSD removed support for them back in 5.6 in late 2014.