Re: Critical: ssh-nonfree IS exploited

[davidw@dedasys.com (David N. Welton)]

Colin Watson <cjwatson@flatline.org.uk> writes:

> A fixed package has *already* been produced. The issue, AIUI, is
> getting an announcement out on debian-security-announce, and only
> the security team can do that.

I'm sure that people will see to it to announce that Debian is
shipping packages with vulnerabilities.  It would be better if it's us
that makes that announcement.

-- 
David N. Welton
   Consulting: http://www.dedasys.com/
Free Software: http://people.debian.org/~davidw/
   Apache Tcl: http://tcl.apache.org/
     Personal: http://www.efn.org/~davidw/