> This claim is wrong, OpenSSH was vulnerable to CRC32 integer overflow > two years ago. But if we recall, OpenBSD was not vulnerable in that case because we got lucky with our malloc. If you don't like our free software, please go run something else.