Re: CVE-2006-4925: Need more Info

[Michael Gilbert <michael.s.gilbert@gmail.com>]

> Hello #debian-security. I have a couple of questions regarding the
> security-tracker and how it displays information.
> 
> For example: http://security-tracker.debian.org/tracker/CVE-2006-4925

hi,

that sort of tracking means that the issue is indeed unaddressed, but
it has been deemed unimportant (i.e. of little practical relevance), so
no work has been done to try to fix the problem.

we should probably update the wording at the top of the page for
such issues, and i'll take a look at that at some point.

that particular issue is unimportant because an openssh crash itself
is not a big deal.  the user can easily just reestablish their
connection if a remote attacker does take advantage of this issue.

hope this is helpful.  best wishes,
mike