[OmniOS-discuss] [ANN] OpenSSH 7.4p1 available

[Dale Ghent]

Scope: OmniOS releases r151014, r151018, r151020, bloody

OpenSSH 7.4p1 is now available in the package repositories for the above releases of OmniOS. Immediate updating to this version is strongly suggested as it addresses the following CVEs:

CVE-2016-10012
CVE-2016-10011
CVE-2016-10010
CVE-2016-10009
CVE-2016-8858
CVE-2016-6515

To update, simply utter:
# pkg update -v openssh openssh-server

The package update process will automatically restart the service FMRI svc:/network/ssh:default

If you are still a user of SunSSH, it is always highly suggested that a migration to OpenSSH be done at earliest opportunity. SunSSH is considered EOL, is unmaintained, and only offers crypto which is considered unsafe. Directions to effect this migration for r151014 (current LTS) users may be found at the top of r151014 release notes:

https://omnios.omniti.com/wiki.php/ReleaseNotes/r151014

/dale


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: Message signed with OpenPGP
URL: <https://omniosce.org/ml-archive/attachments/20170202/d4f31c6e/attachment.bin>