[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Significant OpenSSH Vulnerability ??



Hi Nico,

> http://www.linuxsecurity.com/articles/cryptography_article-5185.html
> Did you read, the article ? Does an patch come till Thursday ?

The OpenSSH mailing list and OpenSSH bugtracker mention that the 
privilege-separation support for Linux with 2.2.X kernels (and a few other 
architectures) is broken.

So the only RaQ where privilege separation works is the RaQ550. I've run into 
that issue when I built PKGs with OpenSSH-3.3p1 two days ago. 

-- 

Mit freundlichen Grüßen / With best regards

Michael Stauber
mstauber@xxxxxxxxxxxxxx
Unix/Linux Support Engineer