Re: OpenSSL Vulnerability and OpenSSH

From: Markus Friedl (markus@openbsd.org)
Date: 09/23/02 

Date: Mon, 23 Sep 2002 10:24:53 +0200
From: Markus Friedl <markus@openbsd.org>
To: nestler@speakeasy.net

On Sat, Sep 21, 2002 at 09:43:48AM -0700, nestler@speakeasy.net wrote:
> > On Fri, Sep 20, 2002 at 09:05:59AM -0400, Eric Maiwald wrote:
> > > Does anyone
> > > know if the same issues affecting OpenSSL on Apache will affect OpenSSL
> > > when used with OpenSSH?
> >
> > yes.
> >
> > the "issues affecting OpenSSL on Apache" do not affect OpenSSH.
> >
> > OpenSSH does not use libssl (only libcrypto).
>
> You seem to imply that all of OpenSSL's problems are in libssl,
> which is not the case.

no. it does not. i just refer to "issues affecting OpenSSL on Apache".