Greg Erskine wrote: 
> Hi poing,
> 
> We develop piCorePlayer using PuTTY and winSCP so both of these still
> work fine...but...and I am not sure if this is related
> 
Hi Greg,

Thanks for taking the time to reply. Based on JackOfAll's hint, I
checked out which version of openssh Cygwin is using (7.0p1) and did
some googling. It turns out that DSS is now disabled in openssh by
default. DSS is considered legacy and has known security
vulnerabilities.

But there is a workaround to enable legacy key exchange mechanisms in
openssh (see http://www.openssh.com/legacy.html).

This alsa explains why my Ubuntu boxes are still working. Their client
is based on openssh 6.6p1.

It's likely that other applications which rely on openssh will
eventually display the same issue once they've been updated to openssh
7.0p1 or above. (Unless Dropbear is changed to allow different key
exchange mechanisms in the meantime.) Just something to keep in mind.


------------------------------------------------------------------------
poing's Profile: http://forums.slimdevices.com/member.php?userid=63617
View this thread: http://forums.slimdevices.com/showthread.php?t=97803

_______________________________________________
unix mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/unix

Reply via email to