From owner-freebsd-security@FreeBSD.ORG Tue Sep 16 09:05:48 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6B9DF16A4B3; Tue, 16 Sep 2003 09:05:48 -0700 (PDT) Received: from goliath.siemens.de (goliath.siemens.de [192.35.17.28]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0BB9243FDD; Tue, 16 Sep 2003 09:05:46 -0700 (PDT) (envelope-from udo.schweigert@siemens.com) Received: from mail3.siemens.de (mail3.siemens.de [139.25.208.14]) by goliath.siemens.de (8.11.7/8.11.7) with ESMTP id h8GG5i109613; Tue, 16 Sep 2003 18:05:44 +0200 (MEST) Received: from mars.cert.siemens.de (ust.mchp.siemens.de [139.23.201.17]) by mail3.siemens.de (8.11.7/8.11.7) with ESMTP id h8GG5hi09865; Tue, 16 Sep 2003 18:05:43 +0200 (MEST) Received: from alaska.cert.siemens.de (alaska.cert.siemens.de [139.23.202.134]) 1.46 2003/05/28 09:28:32 ust Exp $) with ESMTP id h8GG5hwg044370; Tue, 16 Sep 2003 18:05:43 +0200 (CEST) Received: from alaska.cert.siemens.de (alaska.cert.siemens.de [127.0.0.1]) hosts/alaska/mail/config.mc,v 1.15 2002/12/31 15:32:17 ust Exp $) with ESMTP id h8GG5hgw026583; Tue, 16 Sep 2003 18:05:43 +0200 (CEST) (envelope-from ust@alaska.cert.siemens.de) Received: (from ust@localhost) hosts/alaska/mail/submit.mc,v 1.4 2002/12/31 15:32:17 ust Exp $) id h8GG5hsh026030; Tue, 16 Sep 2003 18:05:43 +0200 (CEST) (envelope-from ust) Date: Tue, 16 Sep 2003 18:05:43 +0200 From: Udo Schweigert To: "Jacques A. Vidrine" , freebsd-security@FreeBSD.org Message-ID: <20030916160543.GA28313@alaska.cert.siemens.de> References: <20030916134347.GA30359@madman.celabo.org> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline In-Reply-To: <20030916134347.GA30359@madman.celabo.org> X-Operating-System: FreeBSD 4.9-PRERELEASE User-Agent: Mutt/1.5.4i X-Mailman-Approved-At: Wed, 17 Sep 2003 03:52:26 -0700 Subject: Re: OpenSSH heads-up X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 16:05:48 -0000 On Tue, Sep 16, 2003 at 08:43:47 -0500, Jacques A. Vidrine wrote: > OK, an official OpenSSH advisory was released, see here: > > > The fix is currently in FreeBSD -CURRENT and -STABLE. It will be > applied to the security branches as well today. Attached are patches: > > buffer46.patch -- For FreeBSD 4.6-RELEASE and later > buffer45.patch -- For FreeBSD 4.5-RELEASE and earlier > And what about the port /usr/ports/security/openssh-portable? It should - at least - be fixed for the 4.9-RELEASE. Best regards -- Udo Schweigert, Siemens AG | Voice : +49 89 636 42170 CT IC CERT, Siemens CERT | Fax : +49 89 636 41166 D-81730 Muenchen / Germany | email : udo.schweigert@siemens.com