Re: Upcoming OpenSSH vulnerability

["veins" <veins@skreel.org>]

upgrading only takes a few minutes  :)

-- veins
a bofh said: I too can bore you with useless encrypted keys...
"? ssa ruoy pu ti evohs dna yek pgp ruoy ekat uoy t'nod yhw"


----- Original Message -----
From: "Adrian Close" <adrian@close.wattle.id.au>
To: "Theo de Raadt" <deraadt@cvs.openbsd.org>
Cc: <misc@openbsd.org>
Sent: Tuesday, June 25, 2002 6:11 AM
Subject: Re: Upcoming OpenSSH vulnerability


> On Mon, 24 Jun 2002, Theo de Raadt wrote:
>
> > errata.html links you to http://openssh.com/openbsd.html where it quite
> > clearly shows how to do this.
>
> Thank you - that's exactly what I was looking for and I was having trouble
> believing it didn't exist.  I think I'm falling afoul of my wonderful new
> ISP's transparent proxy (which is now giving me the right content, just
> to make me doubt my sanity, I suspect).
>
> Does enabling 'privsep' on 3.1 without upgrading to OpenSSH 3.3 have any
> useful effect or must one upgrade?
>
> Thanks,
>
> Adrian Close email: adrian@close.wattle.id.au
> 1 Old Gippsland Rd. web: http://www.close.wattle.id.au/~adrian
> Lilydale, VIC, 3140, Australia mobile: +61 412 385 201