> Are we expecting a newer package then openssh-3.4p1-4 as when I start
> sshd on a 8.0 machine I get the following message
>
> "This platform does not support both privilege separation and
compression
> Compression disabled"

As I know from an announcement V3.4 should have compression enabled.
The early 3.3 had no support and no full pam-support.
If they did not get it working in 3.4, other features may not work as
well.
This would be a bad thing!

If true, the V3.4 is still a beta or alpha!

Even the exploit was not that discussed, were the problem is.
Official posts on www.openssh.orgh say, that old version with SuSE
Standard-seetings are not affected!
So why update to an incompleted fix?

Second thing is, why does SuSE build packages for 2.4 kernel on 2.2
machines (this was done for openssh 3.4, as I read all posts)?

Philippe

-- 
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]