Re: Are OpenSSL bugs related to OpenSSH ?

From: Simon *** (simond@irrelevant.org)
Date: 07/31/02 

From: Simon *** <simond@irrelevant.org>
To: Adrian Penisoara <ady@freebsd.ady.ro>
Date: 31 Jul 2002 12:02:45 +0100

On Wed, 2002-07-31 at 10:24, Adrian Penisoara wrote:
> Hi,
>
> Though I think that the recent OpenSSL buffer overflows don't imply
> that OpenSSH is vulnerable, could someone please confirm this ?

OpenSSH is linked against OpenSSL, so it's a possibility that it could
be vulnerable, but unless you have ssh statically linked then updating
your openssl version will fix any problems. 

-- 
Simon ***					simond@irrelevant.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message