OpenSSH 9.8 has just been released. This release includes a fix for a critical race condition in sshd that could be exploited for remote code execution so you should definitely patch or upgrade. It also contains a fix for a minor issue in ssh that saw the recently-added ObscureKeystrokeTiming feature work the opposite way as intended.
There are some new features too. Please see the release notes at https://openssh.com/releasenotes.html for more details
Damien Miller /
npub14u…ys68l
2024-07-01 08:11:12
Author Public Key
npub14uw0zk3gf75y9kdprhpy4peyjp8agehc6sp0vwjh9funrh950x6q2ys68lSeen on
wss://relay.mostr.pubPublished at
2024-07-01 08:11:12Event JSON
{
"id": "cb81baba2af086256bc0916fe3757653fb58c03332bffc38d0081d5456e07dc8",
"pubkey": "af1cf15a284fa842d9a11dc24a8724904fd466f8d402f63a572a7931dcb479b4",
"created_at": 1719821472,
"kind": 1,
"tags": [
[
"proxy",
"https://cybervillains.com/users/djm/statuses/112710220020323435",
"activitypub"
]
],
"content": "OpenSSH 9.8 has just been released. This release includes a fix for a critical race condition in sshd that could be exploited for remote code execution so you should definitely patch or upgrade. It also contains a fix for a minor issue in ssh that saw the recently-added ObscureKeystrokeTiming feature work the opposite way as intended. \n\nThere are some new features too. Please see the release notes at https://openssh.com/releasenotes.html for more details",
"sig": "d07560bd29261905100e73b2dee23d67c082e92ea121fc7987e0eaded9f1e932cca21e3c00a536c5f8412199aa608abc04db28bd1ceb3c5ce9d7565fb2df72a5"
}