OpenSSH patch

Paul Whitney paul.whitney at mac.com
Fri Aug 14 18:34:40 UTC 2015


I use pam_tally2 for that. 


Paul Whitney
email: paul.whitney at mac.com
cell: 410.493.9448

Sent from my iPhone

> On Aug 14, 2015, at 13:47, Ron Colvin <Ron.Colvin at nasa.gov> wrote:
> 
> A patch for the SSH bug that bypassed the MaxAuthTries limit was just patched. Has MaxAuthTries been considered as a control in the security guide?
> 
> http://www.openssh.com/txt/release-7.0
> https://threatpost.com/openssh-7-0-fixes-four-flaws/114265
> 
> -- 
> 
> 
> ********************************************************
> Ron Colvin CISSP, CAP, CEH
> Certified Security Analyst
> NASA - Goddard Space Flight Center
> <ron.colvin at nasa.gov>
> Direct phone 301-286-2451
> NASA Jabber (rdcolvin at im.nasa.gov) AIM rcolvin13
> NASA LCS (ronald.d.colvin at nasa.gov)
> ********************************************************
> 
> 


More information about the scap-security-guide mailing list