Re:Terrapin Attack for prefix truncation in SSH
by 1letterunixname on Tuesday December 19, 2023 @04:37AM
(#38693621)
No. Mitigations were available for openssh before you wrote that comment. Follow the recommendations from ssh-audit (master version). [0]
For packages, openssh and openssh-portable 9.6 include the fix, but every vendor will need to backport if they maintain their own pile of patches against a particular version of -portable.
For packages, openssh and openssh-portable 9.6 include the fix, but every vendor will need to backport if they maintain their own pile of patches against a particular version of -portable.
0. https://github.com/jtesta/ssh-audit