[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SSHD patch for Debian?

On Wed, 4 Nov 1998, Amos Shapira wrote:

> Hello,
> With all the talks and patches for ssh-1.2.26 flying around on bugtraq
> (today someone finally reportted finding an exploit program), are
> there any plans to release a patched version?  I tried applying the
> posted patch to the source and run "debian/rules binary" but though
> the compilation phase runs fine, it failed to build a package ("find:
> can't find usr/bin/ssh-askpass" or somesuch).
> As far as I see it right now, this doesn't comply with Debian's
> declared commitment for rapid security fixes.
> Look at the bugtraq archives for the patches.  It applies cleanly on
> the source files but not on the Makefile.in, but then Linux has the
> new function in its libc6 so it isn't necessary.

Nobody has yet determined a patch for the problems, IBM revoked theirs :<
If you have one send it to security@debian.org Presumably someone will
figure out what is wrong RSN.


Reply to: