I had sent this to the mailing list yesterday, but for some reason it never showed up. I just subscribed to the list to see if that fixes it.. --------- Hi guys,
I'm using the latest version of SmartOS base-64-lts and noticed a few things that stood out to me. I saw that the OpenSSH was built using version 1.0.1p OpenSSL library as seen here: https://gist.github.com/precurse/348a7d04a1c1b09ddccf While OpenSSH itself is relatively current (7.1p2 instead of 7.2p2), it was built using a release of OpenSSL that's nearly a year old and 3 patch releases old: https://www.openssl.org/news/openssl-1.0.1-notes.html (1.0.1s is the most current). Not as concerning, but I have noticed that the default SSH Config is using line items that are deprecated as seen in the /var/log/authlog log here: https://gist.github.com/precurse/19c339f5e333c3969e88 Any idea if there are plans to fix these in the base images? Ps: The work that you're doing with SmartOS is brilliant. Thanks, Andrew ------------------------------------------- smartos-discuss Archives: https://www.listbox.com/member/archive/184463/=now RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00 Modify Your Subscription: https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb Powered by Listbox: http://www.listbox.com
