#bastion (2024-08)
Discuss cloudposse/bastion
2024-08-11
Have been using the bastion on my home server as a SSH gateway into my home network - noticed that OpenSSH is quite old (9.3p1) and has known vulnerabilities, what/how would I go about updating to a more recent version? Can see bastion has various custom patches for both alpine and itself for openssh, not sure how/if they can just be applied. If nobody else doing then I will look at myself, or look at some other ssh bastion image/tool
Ya, unfortunately we are not able to help maintain it, as we have no customers sponsoring its maintenance.
Bear in mind the recent SSH vulnerability requires glibc, which does not exist on alpine.
Thanks for that, understand - will look at other options
We use predominantly Teleport or AWS Session Manager SSH over SSM
Also, consider Cloud Shell https://aws.amazon.com/about-aws/whats-new/2024/01/aws-cloudshell-docker-13-regions/
bastion on my home server as a SSH gateway into my home network
Oh, never mind my suggestions