[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: suggestions for packages to force to testing for security fixes

On Fri, Apr 01, 2005 at 05:10:05AM -0800, Steve Langasek wrote:
> > lsh-utils 2.0-1 needed, have 1.4.2-8.2 for CAN-2005-0389
> > lsh-utils 2.0.1-1 needed, have 1.4.2-8.2 for CAN-2005-0814 
> > 	(Also has a RC bug though.)
> yeah, that doesn't sound like a win yet (though it's also built on m68k).

lsh-utils has following, worrying description:

Description: Secure Shell v2 (SSH2) protocol server
 WARNING: This is a work in progress, and may be totally insecure.

If the description is not out of date (It hasn't changed since last
stable), is this really something that should go to sarge?

Reply to: