On Sun, 2002-04-07 at 14:34, Peter Lieven wrote: > Is there any reason why there is no OpenSSH 3.1 package for debian available yet? > is the "OpenSSH_3.0.2p1" version avaiable in the testing/unstable tree already >patched > against the "March 7, 2002: Off-by-one error in the channel code" security hole?
Yes, it was fixed in debian package Openssh_3.0.2p1-8 (maybe allready in 7, but that had other problems) Debian usually patches the (security) bug, without going straight to the new upstream release, but only upgrading the package number -- Mark Janssen Unix / Linux, Open-Source and Internet Consultant @ SyConOS IT E-mail: mark(at)markjanssen.nl / maniac(at)maniac.nl GnuPG Key Id: 357D2178 Web: Maniac.nl Unix-God.[Net|Org] MarkJanssen.[com|net|org|nl] SyConOS.[com|nl] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
