Re: Re: [CentOS-announce] Impact of the Debian OpenSSL vulnerability

["Stephen John Smoogen" <smooge@xxxxxxxxx>]

On Sat, May 17, 2008 at 7:57 PM, Karanbir Singh <mail-lists@xxxxxxxxx> wrote:
> Daniel de Kok wrote:
>>
>> - What does our upstream think about this?
>> - What do the OpenSSH developers think about this?
>
> Someone is going to need to ask those questions of the people...
>

I don't think either Red Hat or OpenSSH are going to do much with
this. From what I have been told the search for bad ssh items if used
inside of SSH slows down connections quite a bit because it does a
search through the 1.5 MB space everything you connect. However, that
could have been fixed with a quicker search algorithm by now

> --
> Karanbir Singh : http://www.karan.org/  : 2522219@icq
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos