From owner-freebsd-stable Thu Mar 7 7:52:14 2002 Delivered-To: freebsd-stable@freebsd.org Received: from smtp017.mail.yahoo.com (smtp017.mail.yahoo.com [216.136.174.114]) by hub.freebsd.org (Postfix) with SMTP id C39C937B402 for ; Thu, 7 Mar 2002 07:52:05 -0800 (PST) Received: from sgeine (AUTH login) at adsl-63-198-133-39.dsl.lsan03.pacbell.net (HELO edinburgh) (sgeine@63.198.133.39) by smtp.mail.vip.sc5.yahoo.com with SMTP; 7 Mar 2002 15:37:59 -0000 Reply-To: From: "Jesse Geddis" To: "Chris Faulhaber" , "Lauri Laupmaa" Cc: Subject: RE: openssh root hole? Date: Thu, 7 Mar 2002 07:37:59 -0800 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal In-Reply-To: <20020307152441.GB82709@peitho.fxp.org> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG file doesn't exist fyi. ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-02:13/openssh.patch -----Original Message----- From: owner-freebsd-stable@FreeBSD.ORG [mailto:owner-freebsd-stable@FreeBSD.ORG]On Behalf Of Chris Faulhaber Sent: Thursday, March 07, 2002 7:25 AM To: Lauri Laupmaa Cc: stable@freebsd.org Subject: Re: openssh root hole? On Thu, Mar 07, 2002 at 05:16:28PM +0200, Lauri Laupmaa wrote: > Hi > > As I just read from http://www.pine.nl/advisories/pine-cert-20020301.txt > > OpenSSH All versions between 2.0 and 3.0.2 have local root hole. > > Is it fixed in -STABLE or is it issue at all? > Please see the advisory that was just released (and/or subscribe to the freebsd-security-notifications list)... http://docs.freebsd.org/cgi/getmsg.cgi?fetch=0+0+current/freebsd-secur ity-notifications -- Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message