Skip to content

Commit

Permalink
openssh: Update version from 7.4p1 to 7.5p1
Browse files Browse the repository at this point in the history
Release notes are available online [1].

> […]
>
> Changes since OpenSSH 7.4
> =========================
>
> This is a bugfix release.
>
> Security
> --------
>
>  * ssh(1), sshd(8): Fix weakness in CBC padding oracle countermeasures
>    that allowed a variant of the attack fixed in OpenSSH 7.3 to proceed.
>    Note that the OpenSSH client disables CBC ciphers by default, sshd
>    offers them as lowest-preference options and will remove them by
>    default entriely in the next release. Reported by Jean Paul
>    Degabriele, Kenny Paterson, Martin Albrecht and Torben Hansen of
>    Royal Holloway, University of London.
>
>  * sftp-client(1): [portable OpenSSH only] On Cygwin, a client making
>    a recursive file transfer could be maniuplated by a hostile server to
>    perform a path-traversal attack. creating or modifying files outside
>    of the intended target directory. Reported by Jann Horn of Google
>    Project Zero.
>
> New Features
> ------------
>
>  * ssh(1), sshd(8): Support "=-" syntax to easily remove methods from
>    algorithm lists, e.g. Ciphers=-*cbc. bz#2671
>
> […]

[1] https://www.openssh.com/txt/release-7.5
  • Loading branch information
pmenzel committed Sep 4, 2017
1 parent 319aff6 commit fff7ba2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion openssh.be0
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#!/bin/env beesh

# BEE_VERSION openssh-7.4_p1-0
# BEE_VERSION openssh-7.5_p1-0

SRCURL[0]="https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PKGVERSION}${PKGEXTRAVERSION}.tar.gz"

Expand Down

0 comments on commit fff7ba2

Please sign in to comment.