On Tue, Dec 7, 2010 at 05:45, Jason Brown <jason(a)jasonbrown.us> wrote:
Related to ticket #1406, a vulnerability was discovered in the CBC
cipher for OpenSSH v2. The recommended change is to only allow CTR and
arcfour ciphers to be used by sshd. This change took affect last night
on pt7. Please notify us of any issues you may have.
For people who would like to try something please test ssh to
publictest7.fedoraproject.org with various clients and let us know
what works and what breaks. Things to test:
older openssh
other ssh
perl SSH
libssh
my-little-pakmara-ssh
--
Stephen J Smoogen.
"The core skill of innovators is error recovery, not failure avoidance."
Randy Nelson, President of Pixar University.
"Let us be kind, one to another, for most of us are fighting a hard
battle." -- Ian MacLaren