Archives For openssh

OpenSSH currently has a bug that will help would-be attackers figure out actual account names on your system by timing how long the server responds to incorrect logins.

You can read the full info on Linux Forum.

On March 21st, the openssh package was updated to patch two moderate vulnerabilities; CVE-2015-5600 and CVE-2016-3115.
Continue Reading…