Browse Source
NOTE: This update mitigates the following security issue: http://seclists.org/fulldisclosure/2014/Oct/35 also it contains updates that make it potentially incompatible with previous versions, namingly: Potentially-incompatible changes * sshd(8): The default set of ciphers and MACs has been altered to remove unsafe algorithms. In particular, CBC ciphers and arcfour* are disabled by default. The full set of algorithms remains available if configured explicitly via the Ciphers and MACs sshd_config options. * sshd(8): Support for tcpwrappers/libwrap has been removed. * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections using the [email protected] KEX exchange method to fail when connecting with something that implements the specification correctly. OpenSSH 6.7 disables this KEX method when speaking to one of the affected versions.master
1 changed files with 2 additions and 2 deletions
Loading…
Reference in new issue