Path to this page:
Subject: CVS commit: pkgsrc/security/ssh-audit
From: Dr. Thomas Orgis
Date: 2023-12-26 18:30:56
Message id: 20231226173057.0B98DFA42@cvs.NetBSD.org
Log Message:
security/ssh-audit: update to 3.1.0 with patch for terrapin
upstream changes since 3.0.0:
v3.2.0-dev (???)
Expanded filter of CBC ciphers to flag for the Terrapin vulnerability. \
It now includes
more rarely found ciphers.
v3.1.0 (2023-12-20)
Added test for the Terrapin message prefix truncation vulnerability \
(CVE-2023-48795).
Dropped support for Python 3.7 (EOL was reached in June 2023).
Added Python 3.12 support.
In server policies, reduced expected DH modulus sizes from 4096 to 3072 \
to match
the online hardening guides (note that 3072-bit moduli provide the \
equivalent of
128-bit symmetric security).
In Ubuntu 22.04 client policy, moved host key types \
sk-ssh-ed25519@openssh.com and
ssh-ed25519 to the end of all certificate types.
Updated Ubuntu Server & Client policies for 20.04 and 22.04 to \
account for key exchange
list changes due to Terrapin vulnerability patches.
Re-organized option host key types for OpenSSH 9.2 server policy to \
correspond with
updated Debian 12 hardening guide.
Added built-in policies for OpenSSH 9.5 and 9.6.
Added an additional_notes field to the JSON output.
Files: