From owner-freebsd-ports  Thu Aug 27 12:18:01 1998
Return-Path: <owner-freebsd-ports@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id MAA06115
          for freebsd-ports-outgoing; Thu, 27 Aug 1998 12:18:01 -0700 (PDT)
          (envelope-from owner-freebsd-ports@FreeBSD.ORG)
Received: from burka.rdy.com (burka.rdy.com [205.149.163.30])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA06039;
          Thu, 27 Aug 1998 12:17:29 -0700 (PDT)
          (envelope-from dima@burka.rdy.com)
Received: (from dima@localhost)
	by burka.rdy.com (8.8.8/RDY&DVV) id MAA01652;
	Thu, 27 Aug 1998 12:16:03 -0700 (PDT)
Message-Id: <199808271916.MAA01652@burka.rdy.com>
Subject: Re: SSH port
In-Reply-To: <19980827115247.B11893@oneinsane.net> from "Ron 'The Insane One' Rosson" at "Aug 27, 1998 11:52:47 am"
To: insane@oneinsane.net
Date: Thu, 27 Aug 1998 12:16:03 -0700 (PDT)
Cc: dima@best.net, axl@iafrica.com, freebsd-ports@FreeBSD.ORG,
        freebsd-security@FreeBSD.ORG
X-Class: Fast
Organization: HackerDome
Reply-To: dima@best.net
From: dima@best.net (Dima Ruban)
X-Mailer: ELM [version 2.4ME+ PL45 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Ron 'The Insane One' Rosson writes:
> On Thu, Aug 27, 1998 at 11:46:40AM -0700, Dima Ruban wrote:
> > Grrr, I just went through the license. Sucks.
> > Btw, I was under impression that 1.26 has a fix for the insertion attack...
> 
> If you find the fix for the assertion let me know.. I would like to get this
> one headache cleared up. I love my ssh. <what is telnet ?? ;-)>
> 

Well, from ChangeLog of 1.2.26 version:

Tue Jul  7 22:38:41 1998  Tero Kivinen  <kivinen@ssh.fi>
	[skipped]
	* Updated deattack code to new version (fixes some bug in
        check_crc function. New code from CORE SDI S.A., Buenos Aires,
        Argentina.

Thu Jun 11 01:05:28 1998  Tero Kivinen  <kivinen@ssh.fi>
	[skipped]
        * Added crc-fix detection code from CORE SDI S.A., Buenos Aires,
        Argentina. See their security announcement for more information. 


Or are you talking about something else?

-- dima

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message