TWSD-759 [JP] HSOL-4182/4188 MIZUHO Bank and MUFG Bank /OpenSSH Vulnerability / April 9, 2025 report / CVE-2025-32728

Review Request #992 — Created July 28, 2025 and submitted — Latest diff uploaded

Information
peteryeh
APV10
rel_apv_10_7
TWSD-759
Reviewers
mingji, tanya, timlai, timsu, weikai 
OpenSSH 10.0p2 is now always actived with sshd-auth by default. Custom option 's' for synconfig was not accepted in sshd-auth. This will reset the connection.
Client (172.20.0.117):


[root@AN ssh]# /ca/bin/ssh -b 172.20.0.117 -p 65519 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o PasswordAuthentication=yes -o Sync=jLUV8j44Rb -o CheckHostIp=no ansync@172.20.0.115 "/ca/sync/munch -l 'show version' -d 172.20.0.117 -f 'init'"

Warning: Permanently added '[172.20.0.115]:65519' (ED25519) to the list of known hosts.

Environment:

  USER=ansync

  LOGNAME=ansync

  HOME=/home/ansync

  PATH=/usr/bin:/bin:/usr/sbin:/sbin:/ca/bin

  MAIL=/var/mail/ansync

  SHELL=/bin/sh

  SSH_CLIENT=172.20.0.117 55484 65519

  SSH_CONNECTION=172.20.0.117 55484 172.20.0.115 65519

show version

172.20.0.117

sync all files

show version




ArrayOS Beta.APV.10.7.4.18 - untagged unofficial build by uid=0(root) gid=0(root) groups=0(root) on devclient: on Mon Jul 28 03:34:10 2025


    Host name : AN
   System CPU : Intel(R) Xeon(R) CPU
   System RAM : 3879188 kbytes.



System boot time : Mon Jul 28 08:39:34 GMT (+0000) 2025

     Current time : Mon Jul 28 09:05:38 GMT (+0000) 2025

   System up time : 26 mins, 34 secs

Platform Bld Date : Mon Jul 28 08:38:43 GMT 2025

           SSL HW : No HW Available

   Compression HW : No HW Available

Network Interface : 1 x Gigabit Ethernet copper

            Model : Array AVX vAPV

    Serial Number : 17AF08AD5502D07716077336737023

  Licensed Limits : vCPUs(x32), NICs(x16), RAM(64 GB), Bandwidth(20 Gbps)

Licensed Features : WebWall  Clustering  L4SLB  L7SLB  Caching

                    SSL  tProxy  SwCompression  LLB  QoS  MultiLang

                    DynRoute  IPv6

      License Key : 33b224f4-24412a64-efac20e1-c137b615-945bc308-4f102680-0454d8ab-20250724-99999999


Array Networks Customer Support

Telephone         : 1-877-992-7729 (1-877-99-ARRAY)

Email             : support@arraynetworks.com

Update            : please contact support for instructions

Website           : http://www.arraynetworks.com


Other Root Version

Rel.APV.10.7.2.5 build on Fri Oct  4 10:39:05 2024


Server sshd (172.20.0.115):


[root@AN test]# /ca/sync/synconfigd -V

OpenSSH_10.0p2, OpenSSL 1.1.1d  10 Sep 2019
    Loading...