From owner-freebsd-security  Wed May 29  2:51:37 2002
Delivered-To: freebsd-security@freebsd.org
Received: from frigg.inter.net.il (frigg.inter.net.il [192.114.186.16])
	by hub.freebsd.org (Postfix) with ESMTP id 488A737B404
	for <security@freebsd.org>; Wed, 29 May 2002 02:51:32 -0700 (PDT)
Received: from main1 ([80.230.140.115])
	by frigg.inter.net.il (Mirapoint Messaging Server MOS 3.1.0.58-GA)
	with SMTP id BLR16755;
	Wed, 29 May 2002 12:51:29 +0300 (IDT)
Message-ID: <001101c206fe$def197b0$738ce650@main1>
From: "Retal" <lirandb@NETVISION.NET.IL>
To: <security@freebsd.org>
References: <200205281758.g4SHwHo75682@freefall.freebsd.org> <20020528172857.B88441@databits.net>
Subject: Re: FreeBSD Security Notice FreeBSD-SN-02:03
Date: Wed, 29 May 2002 12:52:03 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hm.. The patch is in
ttp://www.ssh.com/products/ssh/advisories/authentication.cfm?
or its allready placed in the CVS tree?

Retal (lirandb@netvision.net.il, retal@retal.co.il)

----- Original Message -----
From: "Pete Fritchman" <petef@absolutbsd.org>
To: <security@FreeBSD.org>; <security-officer@FreeBSD.org>
Sent: Tuesday, May 28, 2002 11:28 PM
Subject: Re: FreeBSD Security Notice FreeBSD-SN-02:03


> ++ 28/05/02 10:58 -0700 - FreeBSD Security Advisories:
> |
+------------------------------------------------------------------------+
> | Port name:      ssh2
> | Affected:       all versions
> | Status:         Not fixed
> | Password authentication may be used even if password authentication
> | is disabled.
> | <URL:http://www.ssh.com/products/ssh/advisories/authentication.cfm>
> |
+------------------------------------------------------------------------+
>
> FYI, I've just committed an update to the ssh2 port (now at version
> 3.1.2) which fixes this problem.  Thanks to the port maintainer,
> larse@ISI.EDU, for his quick response.
>
> --pete
>
> --
> Pete Fritchman [petef@(databits.net|freebsd.org|csh.rit.edu)]
> finger petef@databits.net for PGP key
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message