[oclug] Upgrade OpenSSH

David F. Skoll dfs at roaringpenguin.com
Thu Mar 7 14:02:37 EST 2002


Time to upgrade OpenSSH.  There's a fairly serious security problem
with versions prior to 3.1p1:

http://lwn.net/daily/opensshoffby1.php3

The advisory claims a local root exploit, but it seems to me it could
be a remote root exploit.

OpenSSH isn't looking too good.  They've had quite a few problems with
it.  Doh.

Regards,

David.




More information about the OCLUG mailing list