OpenSSH Security Patches
Discussions center on OpenSSH patches, commits, releases, and mitigations addressing SSH vulnerabilities, exploits, and security improvements, with references to developer announcements and historical fixes.
Activity Over Time
Top Contributors
Keywords
Sample Comments
Just read the manual, nice to see they are not patching ssh for this.
Yes: https://github.com/openssh/openssh-portable/commit/03e3de416...
Tiny patch to OpenSSH, but it'll get onto millions of boxes eventually.
A tweet from the OpenSSH developers:https://twitter.com/damienmiller/status/605865246016692225
It will certainly limit possibilities of 0day ssh exploitation.
Strange characterization given OpenSSH is everywhere so it isn't a dead-end.
It's another layer of security. There have been exploits of OpenSSH in past so this may be prudent.
Has that been done for OpenSSH?
Still establishes that SSH was being used, which seems to be userbinator's concern.
OpenSSH 9.8/9.8p1 (2024-07-01) seems to have fixed this.