OpenSSH 5.2 Secured and Tuned
Even though the OpenSSH project emphasizes that the focus of 5.2 is bug fixes to the 5.1 version, 5.2 does contain some notable enhancements.
Security-wise the new OpenSSH version replaces cipher block chaining (CBC) mode as the default cipher order with the Advanced Encryption Standard (AES) Counter (CTR) mode to remove the susceptibility to "Plaintext Recovery Attack Against SSH." The software also adds other countermeasures to these attacks, as reported in CPNI Vulnerability Advisory SSH 957037. Last November it became clear that many versions of OpenSSH exposed up to 32 bits of plaintext ciphertext to attackers when the default CBC mode was in use. The solution in 5.2 was to read the maximum supported packet length instead of terminating the connection, thereby eliminating the leaks that allowed the plaintext recovery attacks.
Compared to OpenSSH 5.1, the updated version provides further command line options and minor functional enhancements. For example, the ssh -y option redirects logging to syslog and dynamic port forwarding was improved. The release changelog includes the list of fixed bugs.
OpenSSH emanates from the OpenBSD project, where a separate team focuses on OpenSSH's portability to different systems. The mirrors with the portable versions also include diffs against the OpenBSD source.
Issue 253/2021
Buy this issue as a PDF
News
-
KDE Plasma 5.24 Introduces Fingerprint Reader Support
The next release of the KDE Plasma desktop environment will include support for fingerprint readers for session authentication and more.
-
Ubuntu 21.10 Released and Finally Includes GNOME 40
The most anticipated update to Ubuntu is finally here and the workflow couldn't be better.
-
Linux Can Now Run on Apple’s M1 Chipset
Linux users looking to take advantage of Apple Silicon are about to get their wish with the M1 chipset.
-
MX Linux 21 RC Candidate Available For Testing
The MX Linux development team has released the RC images for MX Linux 21 for testing purposes.
-
Fedora 35 is Shaping Up to Be an Impressive Release
Although the beta version of Fedora’s upcoming release is behind schedule, the Linux distribution is still slotted for October and will include numerous bug fixes and some exciting new features.
-
Canonical Extends Support For Ubuntu 14.04 and 16.04
The company behind Ubuntu offered a much-needed lifeline to those who still depend on older versions of the open-source operating system.
-
GNOME 41 Has Arrived
The latest version of the GNOME desktop environment has been released with new functionality and plenty of improvements.
-
System76 Updates the 15" Pangolin with Ryzen
System76 announced they’re updating the Ryzen-powered Pangolin laptop to meet today’s need for more power.
-
KDE Plasma 5.23 Promises Plenty of Subtle Improvements
The next release of the KDE Plasma desktop includes new features, numerous improvements, and plenty of bug fixes.
-
GNOME 41 Beta is Now Available
The most popular open-source desktop environment is on the cusp of yet another new release, but don’t expect the massive changes found in the previous iteration.