We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·29d ago·5 min read
OpenSSH 10.4/10.4p1 Released
TL;DR
OpenSSH 10.4 introduces several security enhancements and configuration changes, including stricter transport protocol rules and fatal errors for certain sandbox failures. Key vulnerabilities were addressed, such as preventing malicious servers from manipulating file download locations.
✦ Why It Matters
Update OpenSSH to version 10.4 to mitigate newly discovered vulnerabilities and enhance security configurations.
Key Takeaways
- Review and update OpenSSH to version 10.4 immediately.
- Adjust configurations to comply with new mixed-case directive outputs.
- Disable sandbox features if seccomp is not supported on your system.
- Monitor for any disconnections due to stricter transport protocol rules.
Full Summary
OpenSSH, a widely used implementation of the SSH protocol, has released version 10.4, which includes critical security fixes and configuration updates. Notably, the transport protocol has been made stricter, disconnecting peers that send inappropriate messages during key exchanges, addressing potential memory waste.
Additionally, vulnerabilities in the SFTP and SCP commands were fixed to prevent malicious servers from redirecting file downloads or writing to unintended directories. Configuration changes include a new mixed-case directive output for sshd and fatal errors for systems lacking seccomp sandbox features.
These updates enhance the security posture of OpenSSH, making it more resilient against attacks. Users are encouraged to review the changes and update their configurations accordingly to maintain security.