Re: OpenSSH on Debian

From: Jan-Hendrik Palic (palic@billgotchy.de)
Date: 05/27/02 

From: Jan-Hendrik Palic <palic@billgotchy.de>
Date: 26 May 2002 22:23:26 GMT

Hi ..

>> > I was trying to install the latest version of OpenSSH on a Debian
>> > box for
>> > security reasons. Unfortunately I am not familiar with this
>> > distribution.
>> > The INSTALL file in th OpenSSH source directory tells me to pass on
>> > the location of the rsh file to the configure script. Well, I don't
>> > know where
>> > it is located in Debian, even a find command could not tell me.
>> What debian version do you use? If you using potato, I will advice
>> yiou to upgrade to woody.
>>
>> In woody, there is ssh 3.0.2p1-9 included:
> Which suffers from a local root exploit, unless the Debian maintainers
> have patched the base OpenSSH code.

umpf .. youre right... I can't see something in the changelog of the
debian-package, that this is fixed

thnx
        Regards

                Jan 

-- 
One time, you all will be emulated by linux!