SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795)

[Coldfirex]

I scanned latet nightly (hrev57531), that has SSH server enabled, with Tenable and it came back as affected by Terrapin.

Looks like we should disable some ssh ciphers to workaround this.

​https://www.tenable.com/plugins/nessus/187315 ​https://www.linuxglobal.com/thwarting-the-terrapin-ssh-attack/

[waddlesplash]

Or we should just upgrade OpenSSH and let it use whatever defaults it finds suitable?

[Coldfirex]

That too. Looks like 9.6 has the changes built in.

[begasus]

PR for 9.6p1 is up at: ​https://github.com/haikuports/haikuports/pull/10029 Still need to check 32bit, but quick run seems promising on 64bit.

[waddlesplash]

Now merged and built.

[Coldfirex]

Confirmed all good with another Nessus scan. Thanks!