On Tue, 16 Sep 2003, Matthew Saltzman wrote: > On Tue, 16 Sep 2003, Guy Fraser wrote: > > ... > > There is an exploit on all previous releases. > > > > http://securityfocus.com/bid/7467/info/ Wrong vulnerability - that one was fixed months ago. http://www.openssh.com/txt/buffer.adv > OpenSSH is already available on the OpenSSH mirrors. A backported fix is > already available from updates.redhat.com or up2date. The current RH update (3.5p1-9 for RH9) includes a patch from the initial advisory. The advisory has since been updated, and now contains some additional fixes. David. -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list