Re: ISS: OpenSSH Remote Challenge Vulnerability

[Theo de Raadt <deraadt@cvs.openbsd.org>]

They alerted me for various reasons they gave (which I could not
verify) that they would change the schedule to tomorrow, last night.
It was decided to not tell anyone that the schedule was changing.

I'm sorry.

> On Wed, Jun 26, 2002 at 10:12:13AM -0600, Theo de Raadt wrote:
> > Saying "disable ChallengeResponse" would have focused attention
> > immediately on about 500 lines of code.
> 
> is it just me or did iss release the info one week early?  based on
> your previous messages i thought the info was going to be released on
> wednesday and 3.4 would be released on monday/tuesday.
> 
> kevin
> 
> -- 
> kevin@suberic.net     that a believer is happier than a skeptic is no more to
> fork()'ed on 37058400   the point than the fact that a drunken man is happier
> meatspace place: inle      than a sober one. the happiness of credulity is a
> http://suberic.net/~kevin    cheap & dangerous quality -- g.b. shaw

1