Skip to main content

Your platform will be unavailable on the 13th of November 2024 from 9am to 12pm (Paris time) for maintenance operations

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #35865 Adjust SSHd crypto settings to prevent Terrapin attack / CVE-2023-48795
    Actions
    Infos
    #35865
    Thomas Gerbet (tgerbet)
    2024-01-24 10:27
    2024-01-23 11:06
    37466
    Details
    Adjust SSHd crypto settings to prevent Terrapin attack / CVE-2023-48795

    Impact is low but we should provide container images with sane default settings (at least so we do not receive "vulnerability" scan made by automated tools...).

    More info here: https://terrapin-attack.com/

    Docker images
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2024-01-24
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #35497 Tuleap Releases 15.5 Delivered 2024-02-05 12:01 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #35865

    Git commit

    tuleap/tuleap/stable

    fix: request #35865 Adjust SSHd crypto settings to prevent Terrapin attack / CVE-2023-48795 5b57717bc3
    User avatar Thomas Gerbet (tgerbet) , 2024-01-23 11:08
    Merge commit 'refs/changes/84/30284/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 002256ace6
    User avatar Joris MASSON (jmasson) , 2024-01-24 10:26
    Referenced by request #35865

    Artifact Tracker v5

    rel #35497 15.5

    Other

    gerrit #30284
    Display settings

    Follow-ups