From owner-freebsd-questions  Wed Oct 16 13: 0:29 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1834A37B401
	for <questions@FreeBSD.ORG>; Wed, 16 Oct 2002 13:00:27 -0700 (PDT)
Received: from obsecurity.dyndns.org (adsl-64-165-226-88.dsl.lsan03.pacbell.net [64.165.226.88])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 66E7A43EA3
	for <questions@FreeBSD.ORG>; Wed, 16 Oct 2002 13:00:26 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id D170266E5E; Wed, 16 Oct 2002 13:00:25 -0700 (PDT)
Date: Wed, 16 Oct 2002 13:00:25 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Jacco <jacco@lionsoft.xs4all.nl>
Cc: FreeBSD Questions <questions@FreeBSD.ORG>,
	Kris Kennaway <kris@obsecurity.org>
Subject: Re: SSHD problem
Message-ID: <20021016200025.GA13748@xor.obsecurity.org>
References: <20021016022753.GA91641@xor.obsecurity.org> <LEEGJHDFDIEGNMNMDFNDAELCHDAA.jacco@lionsoft.xs4all.nl>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="lrZ03NoBR/3+SXJZ"
Content-Disposition: inline
In-Reply-To: <LEEGJHDFDIEGNMNMDFNDAELCHDAA.jacco@lionsoft.xs4all.nl>
User-Agent: Mutt/1.4i
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--lrZ03NoBR/3+SXJZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Oct 16, 2002 at 06:30:12PM +0200, Jacco wrote:
> Hello Kris,
>=20
> | You do realise the sshd in 4.4-RELEASE has a serious security
> | vulnerability?
>=20
> Unfortunately I didn't know that. Would the "coredump" (and security)
> problem be fixed after upgrading SSHD?

No idea about the coredump, but the security problem will certainly be
fixed by following the upgrade directions in the security advisory.

Kris

--lrZ03NoBR/3+SXJZ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9rcVYWry0BWjoQKURAh2JAKDWxu91H07KnNhmKOGkDb/CGEuLUwCePytg
UFmXiL1ma+AAydf1CdmwFUE=
=lj/J
-----END PGP SIGNATURE-----

--lrZ03NoBR/3+SXJZ--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message