OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Thorsten Glaser (tygs_at_netcologne.de)
Date: Tue Aug 06 2002 - 21:38:56 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    begin electrogrammati illius Lars Hansson

    >On Tue, 06 Aug 2002 16:32:04 -0700
    >Pete Gontier <kokorozashigontier.org> wrote:
    >
    >> So, what's the story? If I'm tracking OPENBSD_2_9, can I assume the hole in
    >> sshd has been plugged? Or should I bite the bullet and build what's in the
    >> tarball from OpenSSH.org?
    >
    >Considering that biting the bullet takes much less time than a rebuild I'd say
    >bite it. Or do both but upgrade OpenSSH after the rebuild since the 2.9-stable
    >has OpenSSH 3.0.2, not 3.4.

    Considering OpenSSL has a bug, you really ought to upgrade to a 3.x
    version of OpenBSD.

    -Thorsten

    -- 
    OpenBSD is a package. Kernel, Userland and Attitude. Attempt to separate
    them at your own risk. - We aren't trying to be the "OS of the Masses".
    The masses are so, well, unwashed. We got work to do. -- Nick Holland