OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: OpenSSH heads-up

From: Mitch Collinsworth (mitchccmr.cornell.edu)
Date: Tue Sep 16 2003 - 09:47:28 CDT


Is this advisory available anywhere else? I'm continually getting
server timeout when trying to load this URL. Meanwhile www.openssh.org
doesn't seem to have any mention of the advisory. [?]

-Mitch

On Tue, 16 Sep 2003, Jacques A. Vidrine wrote:

> OK, an official OpenSSH advisory was released, see here:
> <URL: http://www.mindrot.org/pipermail/openssh-unix-announce/2003-September/000063.html >
>
> The fix is currently in FreeBSD -CURRENT and -STABLE. It will be
> applied to the security branches as well today. Attached are patches:
>
> buffer46.patch -- For FreeBSD 4.6-RELEASE and later
> buffer45.patch -- For FreeBSD 4.5-RELEASE and earlier
>
> Currently, I don't believe that this bug is actually exploitable for
> code execution on FreeBSD, but I reserve the right to be wrong :-)
>
> Cheers,
> --
> Jacques Vidrine . NTT/Verio SME . FreeBSD UNIX . Heimdal
> nectarcelabo.org . jvidrineverio.net . nectarfreebsd.org . nectarkth.se
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"