Re: CVE-2006-0883 - are we vuln?

[Jan Luehr <jan@kabelwelt-shop.de>]

Hello,

Am Sonntag, 5. März 2006 23:01 schrieb Moritz Muehlenhoff:
> Jan Luehr wrote:
> > can you confirm or deny, that we're effected by CVE-2006-0883 (SSH-DoS)?
> > I haven't found any suitable information yet.
> > Since only freebsd released a fix (afaik) I don't even know, if any linux
> > builts are  exploitable.
>
> It's fixed since ages in Debian, in 3.8.1p1-4, Woody isn't affected.

Thanks - do you know the dsa number, too?
I haven't seen any dsa regarding openssh this year. (Well, it's CVE-2006, thus 
I think it've been found this year, haven't it?

Keep smiling
yanosz