14 Feb
2001
14 Feb
'01
13:01
I'm still missing the Announcement here for:
- SSH Updates for the CERT Advisories dated 09-12 Feb 2001
Due to a communication problem we ran into a licensing problem (the ssh versions after 1.2.27 have an entirely different license which is not acceptable for a Linux distribution). I'll have the patches applied myself if the usual way doesn't work out until 1600.
Why not drop ssh and use OpenSSH?
- Kernel-Updates for the ptrace() and sysctl() Bug-Announcements
The fix for the ptrace() race was incomplete. It is non-trivial to handle. Be sure we're working on it.
Funny that, kernel calls being tricky and all to fix ;)
Joerg Henner.
Roman.
Kurt Seifried, seifried@securityportal.com Securityportal - your focal point for security on the 'net