Re: Which ssh should I have?

[Ville Uski <frtvu@fy.chalmers.se>]

* jigal <hangoor@xs4all.nl> [011107 14:20]:
> But I found this in the archives of the security mailinglist:
> http://lists.debian.org/debian-security/2001/debian-security-200102/msg00138.html
> 
> The previous mail in the thread references to:
> http://razor.bindview.com/publish/advisories/adv_ssh1crc.html
> 
> Which is the vuln in question.

Thanks! 

> You could however grab the source of ssh from the unstable tree
> and compile it yourself.

Hm, why should I do that? Is my admin right when he thinks that my
current sshd is vulnerable? I have the latest stable precompiled
package, i.e. the default ssh installed.

Well, I can compile it anyway. Hopefully it convinces the admin.

Best,
Ville