[Evergreen] evergreen 11.4 openssh update

2016-01-15 Thread Christian
Hi, I would try to prepare an update for openssh Or is someone already doing it ... http://www.heise.de/newsticker/meldung/Triple-Seven-OpenSSH-Schwachstelle-leakt-geheime-Schluessel-3071372.html Experimental roaming code in the ssh client could be tricked by a hostile sshd server, potentially le

Re: [Evergreen] evergreen 11.4 openssh update

2016-01-15 Thread Wolfgang Rosenauer
It is already in the pipeline. Unfortunately with 13.1 there are platforms like arm and ppc which need to be built and OBS did not yet finish all of them. We hsve to watch this and see what to do about those. There are blocked build jobs since hours where I am not sure we want to delay important

Re: [Evergreen] evergreen 11.4 openssh update

2016-01-15 Thread Michal Kubecek
On Fri, Jan 15, 2016 at 07:22:25PM +0100, Christian wrote: > Hi, > I would try to prepare an update for openssh > Or is someone already doing it ... > > http://www.heise.de/newsticker/meldung/Triple-Seven-OpenSSH-Schwachstelle-leakt-geheime-Schluessel-3071372.html > > Experimental roaming code in

Re: [Evergreen] evergreen 11.4 openssh update

2016-01-15 Thread Christian
Am 15.01.2016 um 19:37 schrieb Michal Kubecek: > On Fri, Jan 15, 2016 at 07:22:25PM +0100, Christian wrote: >> Hi, >> I would try to prepare an update for openssh >> Or is someone already doing it ... >> >> http://www.heise.de/newsticker/meldung/Triple-Seven-OpenSSH-Schwachstelle-leakt-geheime-Schl