SUSE Linux vulnerability patching consulting

We require a consultant to provide guidance on patching vulnerabilities in a client SUSE linux server. You will NOT have unsupervised access to the client server and will be required to provide written advice and procedures for our team to implement. On some occasions we might allow access via TeamViewer to our staff PCs for supervised access. Here is an example of the type of vulnerability we will ask you to assist with Open 2.6 Out SLA Medium 483 [login to view URL] Linux 2.6.32 SSH CBC vulnerability ssh-cbc-ciphers SSH contains a vulnerability in the way certain types of errors are handled. Attacks leveraging this vulnerabilty would lead to the loss of the SSH session. According to CPNI Vulnerability Advisory SSH: If exploited, this attack can potentially allow an attacker to recover up to 32 bits of plaintext from an arbitrary block of ciphertext from a connection secured using the SSH protocol in the standard configuration. If OpenSSH is used in the standard configuration, then the attacker's success probability for recovering 32 bits of plaintext is 2^{-18}. A variant of the attack against OpenSSH in the standard configuration can verifiably recover 14 bits of plaintext with probability 2^{-14}. The success probability of the attack for other implementations of SSH is not known. SSH can be done using Counter (CTR) mode encryption. This mode generates the keystream by encrypting successive values of a "counter" function. In order to mitigate this vulnerabilty SSH can be setup to use CTR mode rather CBC mode. 2020-05-15 0:00:00 2020-09-25 0:00:00 2020-10-02 0:00:00 TCP 22 * Running SSH service * Insecure CBC ciphers in use: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc devdb..com (n/a - Third Party): This is a part time role