Re: Upcoming OpenSSH vulnerability

[Adrian Close <adrian@close.wattle.id.au>]

On Mon, 24 Jun 2002, Theo de Raadt wrote:

> However, everyone should update to OpenSSH 3.3 immediately, and enable

OK.  Can someone in the know please post some instructions on the approved
patching method?

I see nothing in http://www.openbsd.org/errata.html about this, nor can I
find any useful CVS tags in src/usr.bin/ssh...  The FAQ at OpenSSH.com is
also strangely quiet on the issue of upgrading.

Thanks,

Adrian Close			email:	adrian@close.wattle.id.au
1 Old Gippsland Rd.		web:	http://www.close.wattle.id.au/~adrian
Lilydale, VIC, 3140, Australia	mobile:	+61 412 385 201