From owner-freebsd-security@FreeBSD.ORG Tue Sep 16 07:54:14 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1E78316A4B3; Tue, 16 Sep 2003 07:54:14 -0700 (PDT) Received: from happygiraffe.net (happygiraffe.net [81.6.215.59]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1CF8D43FAF; Tue, 16 Sep 2003 07:54:11 -0700 (PDT) (envelope-from dom@happygiraffe.net) Received: from localhost (localhost.happygiraffe.net [127.0.0.1]) by happygiraffe.net (Postfix) with ESMTP id 4B19E5C89; Tue, 16 Sep 2003 15:54:09 +0100 (BST) Received: from happygiraffe.net ([127.0.0.1]) by localhost (ppe.happygiraffe.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 51253-03-3; Tue, 16 Sep 2003 15:54:08 +0100 (BST) Received: by happygiraffe.net (Postfix, from userid 1001) id D2EB75C79; Tue, 16 Sep 2003 15:54:08 +0100 (BST) Date: Tue, 16 Sep 2003 15:54:08 +0100 To: Mitch Collinsworth Message-ID: <20030916145408.GA51438@ppe.happygiraffe.net> References: <20030916134347.GA30359@madman.celabo.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.1i From: dom@happygiraffe.net (Dominic Mitchell) X-Virus-Scanned: by amavisd-new at happygiraffe.net cc: "Jacques A. Vidrine" cc: freebsd-security@freebsd.org Subject: Re: OpenSSH heads-up X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 14:54:14 -0000 On Tue, Sep 16, 2003 at 10:47:28AM -0400, Mitch Collinsworth wrote: > Is this advisory available anywhere else? I'm continually getting > server timeout when trying to load this URL. Meanwhile www.openssh.org > doesn't seem to have any mention of the advisory. [?] I can get a little bit of that URL to load, but it just times out after that. From the bit that I can see, however, it mentions: http://www.openssh.com/txt/buffer.adv Which is presently returning a 404. I'd just wait up for it to be propogated a little wider; doubtless it'll end up on bugtraq soon. -Dom