From owner-freebsd-hackers@FreeBSD.ORG Tue Sep 16 17:57:05 2003 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A388B16A4BF for ; Tue, 16 Sep 2003 17:57:05 -0700 (PDT) Received: from geekpunk.net (adsl-154-171-84.bna.bellsouth.net [68.154.171.84]) by mx1.FreeBSD.org (Postfix) with ESMTP id 95A8143FCB for ; Tue, 16 Sep 2003 17:57:02 -0700 (PDT) (envelope-from bandix@geekpunk.net) Received: from localhost.my.domain (taran [127.0.0.1]) by geekpunk.net (8.12.8p1/8.12.6) with ESMTP id h8GIqIFN030583; Tue, 16 Sep 2003 13:52:18 -0500 (CDT) (envelope-from bandix@geekpunk.net) Received: (from bandix@localhost) by localhost.my.domain (8.12.8p1/8.12.8/Submit) id h8GIqCA2030582; Tue, 16 Sep 2003 13:52:12 -0500 (CDT) Date: Tue, 16 Sep 2003 13:52:12 -0500 From: "Brandon D. Valentine" To: William Michael Grim Message-ID: <20030916185212.GF389@geekpunk.net> References: <20030916103259.N52432-100000@mail.econolodgetulsa.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i cc: freebsd-hackers@freebsd.org Subject: Re: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ? X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 00:57:05 -0000 On Tue, Sep 16, 2003 at 01:45:42PM -0500, William Michael Grim wrote: > What the hell are you talking about? Thanks for not giving us any info > about your problem. I think he was assuming that we were all aware of the OpenSSH exploit that was just announced. Mr. Brooks would do well to read freebsd-announce, freebsd-security or freebsd-security-notifications. His question has been answered in the latest FreeBSD Security Advisory. Brandon D. Valentine -- brandon@dvalentine.com http://www.geekpunk.net Pseudo-Random Googlism: unix is my os