OpenSSH, a widely used suite of programs for secure (SSH protocol-based) remote login, has been equipped with protection against side-channel attacks that could allow attackers to extract private keys from memory.
About OpenSSH
OpenSSH is the most popular implementation of the SSH (Secure Shell) protocol.
It encrypts all traffic to stymie eavesdropping, connection hijacking, and similar attacks, and provides several authentication methods, a variety of configuration options and various tunneling capabilities.
The suite is incorporated into many Linux distributions and also in Windows 10 (since version 1803).
About the patch
The patch, submitted by long-time OpenBSD and OpenSSH developer Damien Miller (and security researcher at Google), adds protection for private keys at rest in RAM against speculation and memory side-channel attacks (Spectre, Meltdown
Support the originator by clicking the read the rest link below.
