OpenSSH 5.2 Secured and Tuned
Even though the OpenSSH project emphasizes that the focus of 5.2 is bug fixes to the 5.1 version, 5.2 does contain some notable enhancements.
Security-wise the new OpenSSH version replaces cipher block chaining (CBC) mode as the default cipher order with the Advanced Encryption Standard (AES) Counter (CTR) mode to remove the susceptibility to "Plaintext Recovery Attack Against SSH." The software also adds other countermeasures to these attacks, as reported in CPNI Vulnerability Advisory SSH 957037. Last November it became clear that many versions of OpenSSH exposed up to 32 bits of plaintext ciphertext to attackers when the default CBC mode was in use. The solution in 5.2 was to read the maximum supported packet length instead of terminating the connection, thereby eliminating the leaks that allowed the plaintext recovery attacks.
Compared to OpenSSH 5.1, the updated version provides further command line options and minor functional enhancements. For example, the ssh -y option redirects logging to syslog and dynamic port forwarding was improved. The release changelog includes the list of fixed bugs.
OpenSSH emanates from the OpenBSD project, where a separate team focuses on OpenSSH's portability to different systems. The mirrors with the portable versions also include diffs against the OpenBSD source.
Issue 247/2021
Buy this issue as a PDF
News
-
StarLabs has Released Another Linux Laptop
A new 14" Linux laptop has been released by the company that created the 11" Star Lite and can be purchased with your choice of Linux distribution.
-
Ubuntu 21.04 Adds Support for Active Directory and Other Major Changes
In a bid to help make Linux more viable for the business desktop, Canonical adds support for Active Directory and a few other notable changes.
-
GNOME 40 Available on openSUSE
The rolling release edition of openSUSE, Tumbleweed, now offers the latest version of the GNOME desktop.
-
Apple M1 Hardware Support to be Merged into Linux Kernel 5.13
Linux users will be able to install their favorite distribution on Apple’s M1-based hardware.
-
KDE Launches the Qt 5 Patch Collection
To support and maintain a stable Qt 5 for KDE Gears and Frameworks, KDE will maintain a patch collection.
-
Linux Creator Warns Next Kernel Could be Delayed
Linus Torvalds has issued concern about the size of kernel 5.12 and possible delays for its release.
-
System76 Updates its Pangolin Laptop
System76 has released a much-anticipated AMD version of their most popular laptop, the Pangolin.
-
New Debian-Based Distribution Arrives on the Market
TelOS is a new Debian-based Linux distribution with a customized, touch-screen-ready KDE Plasma 5 desktop.
-
System76 Releases New Thelio Desktop
One of the most ardent supporters of open source hardware has released a new desktop machine for home or office.
-
Mageia 8 Now Available with Linux 5.10 LTS
The latest release of Mageia includes improved graphics support for both AMD and NVIDIA GPUs.