[Dshield] more OpenSSH 'badness'

Keith Bergen keith at keithbergen.com
Wed Sep 17 23:00:16 GMT 2003

I just got introduced to CVSUP. It seems nice.

When I run make in the /usr/ports/security/openssh directory, it still
downloads and compiles 3.6.1. I checked, and 3.7.1 is out there.

I reloaded my /usr/ports stuff, and they seem to be up-to-date (cvsup -g -L
2 /root/ports-supfile). Do I just need to wait until it is available?


-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf
Of Johannes B. Ullrich
Sent: Tuesday, September 16, 2003 11:01 PM
To: list at dshield.org
Subject: [Dshield] more OpenSSH 'badness'

OpenSSH 3.7.1 just got released. It fixes additional overflows. So this
mornings patch session was just the dressed rehersal.

(This mornings version was 3.7p1. the most recent version as of this writing
is 3.7.1)

SANS - Internet Storm Center
PGP Key: http://isc.sans.org/jullrich.txt

More information about the list mailing list