From owner-freebsd-security@FreeBSD.ORG  Thu Sep 18 03:08:38 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A740216A4B3
	for <freebsd-security@freebsd.org>;
	Thu, 18 Sep 2003 03:08:38 -0700 (PDT)
Received: from worf.kerna.com (worf.kerna.com [194.106.143.118])
	by mx1.FreeBSD.org (Postfix) with SMTP id 16D6C43F85
	for <freebsd-security@freebsd.org>;
	Thu, 18 Sep 2003 03:08:37 -0700 (PDT)	(envelope-from james@kerna.ie)
Received: (qmail 85024 invoked by uid 1001); 18 Sep 2003 10:09:07 -0000
Date: Thu, 18 Sep 2003 11:09:07 +0100
From: James Raftery <james@kerna.ie>
To: freebsd-security@freebsd.org
Message-ID: <20030918100907.GA85007@bender.kerna.ie>
References: <200309172237.h8HMbuvK078935@freefall.freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200309172237.h8HMbuvK078935@freefall.freebsd.org>
Subject: Re: [FreeBSD-Announce] FreeBSD Security Advisory
	FreeBSD-SA-03:12.openssh [REVISED]
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 18 Sep 2003 10:08:38 -0000
X-List-Received-Date: Thu, 18 Sep 2003 10:08:38 -0000

On Wed, Sep 17, 2003 at 03:37:56PM -0700, FreeBSD Security Advisories wrote:
> # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-03:12/buffer46.patch
[snip]

The patch above doesn't appear to modify src/crypto/openssh/version.h

> Branch                       Version string
> - -------------------------------------------------------------------------
> RELENG_4_7                   OpenSSH_3.4p1 FreeBSD-20030917

After patching (on the 4.7 security branch), my version string still
says:

 sshd version OpenSSH_3.4p1 FreeBSD-20020702

Would the Security Team mind publishing a version of the patch that
modifies the version string?

Thanks,
james