Date: Fri, 29 Nov 2013 01:08:38 +0000 (UTC) From: Xin LI <delphij@FreeBSD.org> To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r43264 - head/share/security/advisories Message-ID: <201311290108.rAT18cCj096532@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: delphij Date: Fri Nov 29 01:08:37 2013 New Revision: 43264 URL: http://svnweb.freebsd.org/changeset/doc/43264 Log: Correct sshd_config path. Noticed by: cstdenis at ctgameinfo.com Modified: head/share/security/advisories/FreeBSD-SA-13:14.openssh.asc Modified: head/share/security/advisories/FreeBSD-SA-13:14.openssh.asc ============================================================================== --- head/share/security/advisories/FreeBSD-SA-13:14.openssh.asc Fri Nov 29 01:02:00 2013 (r43263) +++ head/share/security/advisories/FreeBSD-SA-13:14.openssh.asc Fri Nov 29 01:08:37 2013 (r43264) @@ -1,5 +1,5 @@ -----BEGIN PGP SIGNED MESSAGE----- -Hash: SHA1 +Hash: SHA512 ============================================================================= FreeBSD-SA-13:14.openssh Security Advisory @@ -10,6 +10,7 @@ Topic: OpenSSH AES-GCM memory c Category: contrib Module: openssh Announced: 2013-11-19 +Revised: 2013-11-28 Affects: FreeBSD 10.0-BETA Corrected: 2013-11-19 09:35:20 UTC (stable/10, 10.0-STABLE) 2013-11-19 09:35:20 UTC (stable/10, 10.0-BETA3-p1) @@ -21,6 +22,11 @@ For general information regarding FreeBS including descriptions of the fields above, security branches, and the following sections, please visit <URL:http://security.FreeBSD.org/>. +0. Revision History + +v1.0 2013-11-19 Initial release. +v1.1 2013-11-28 Corrected path to sshd_config. + I. Background OpenSSH is an implementation of the SSH protocol suite, providing an @@ -50,8 +56,8 @@ placed on their account. IV. Workaround Disable AES-GCM in the server configuration. This can be accomplished by -adding the following /etc/sshd_config option, which will disable AES-GCM -while leaving other ciphers active: +adding the following /etc/ssh/sshd_config option, which will disable +AES-GCM while leaving other ciphers active: Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc @@ -121,19 +127,18 @@ VII. References The latest revision of this advisory is available at <URL:http://security.FreeBSD.org/advisories/FreeBSD-SA-13:14.openssh.asc>; -----BEGIN PGP SIGNATURE----- -Version: GnuPG v1.4.15 (FreeBSD) -iQIcBAEBAgAGBQJSizUhAAoJEO1n7NZdz2rn6VcQALriII/5f2ipZQeOt41p5oBi -r3qQ3uoZc705MGhld/Zz/RjmB8N+NSZUCZQP0sjaEUkksykZNQhmlbvJXB0ywDHP -ggIpq++7r2igXMwqqj+7SEtOkQc/rP8/pDjAn0CJKDGIItgpYuqB34sEJNNuYjiM -f/bdfXN3zU4VOiIjCjfGuOamGPXCyRdEAm9HKMVWuDqXIjBHdOxhkw2TnyrC77Vd -IxOEYsD97XYuJF++55uHBMv+jynrlQfJF9s3+rQVGOqs14KXYJ+HeqFwxJkhIzyg -BrxotPNcO6i5lFOiZrCcmEkf3SRh3Ok3CFFFdn9EhOTxrfGKRm/7R+WB0NKT4+ll -sAWfhCCMHkhE/j/0L/DCGL8wD6zH1bzpFWn6efAlih4N5YXSJfGlZdkPw0zl/ZgD -umYiwpr9PMnPtocfpV51HITNf0T+CUUHJ5bI3Do9cKZyr3yt869r2MNH6PLT0Lyl -4YTcN6IC1K+2JXxvjry7wuJWaPUDS/Hl7Rb3vivdyFJsOF6cddCq1uoU/COXjEE7 -KF2+KXNKyCZvfPYxzaljvQjEEGZFswN21YrG4dk3JbaOEo0/+s06DJe/YDhagRgQ -h1DtzesRuV8Mlxf0kCX5dmMEjIYX0ZtsZT7aueoSD0zGDFpiOjMQ2DQ3O9S3UhFz -ScAFXjtFwMqy8RkwNzIp -=Nkc2 +iQIcBAEBCgAGBQJSl+hmAAoJEO1n7NZdz2rnHMYP/3yEQldDKONpQ1zS5YfDyVwO +wRBTgxMST7ozg/y7/xBA9FIpdRB8fJOgijKKVQv02MCN5xM5mXexxZAu1X3gcWls +v8Tf1YogR0IzLKzFDYYqZ/gWg/5vK1ALzPbHRSmDYivUSOyJftvDNFzPZnFp4DsI +U30OGxBfLSOvvX5XNGSixmILzv5DLxe7ThGa36oIZCKUAXSrNm79NfGiI0EvXK2Y +R3nTjdd5r5F5/K5S59BMmAmKCGIqsTJ/jeICKe49VUK+YyD+Wmr0gohhU6bmENWM +aXAD9em+uKGZnlqBUr5YC4vv8NHWuhOTWfl1CTDH4QhFOP+hiJt2w4EvGYORL1R/ +2VDmFtiiPeebi7ECSTOSudx/xGvycpnUspw4T/b+H+kGar1ZvHpwqRYDC/Wla5Vq +Uzi7uIWTdJieLQXRERTln8mtehYmfHurlu1Mltb0v35vkSyUV5V6RjtxRAi0sWbj +w1A0lpDga1lom1FI5JTsiGtwV8A3MbmFKLuK7EUQf8I8lS80SptJNMMTkzYeW/Zy +jVqSj63Ns3WaDeHMURYfxf2ppb3meBX+Tw0glTBFJlE46c/sZ01zmcM0q1jQk5Vn +nHZgnGTKsCqR1VlnARdDicfa3VVhcPxeUkGEALZv1m31jA0AYG7BeAX9pvoQoOGK +1Oeu9j2MeszutBto6gqh +=6vNc -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201311290108.rAT18cCj096532>