Bug#211351: ssh: Security - DSA-382-1 is based on 1st (obsolete revision) of OpenSSH Security advisory

[Colin Watson <cjwatson@debian.org>]

On Wed, Sep 17, 2003 at 11:05:29AM +0200, Dariusz Puchalak wrote:
> Package: ssh
> Version: 1:3.4p1-1.1
> Severity: critical
> 
> Security pacth is based on 1st revision of OpenSSH Security Advisory:
> buffer.adv
> Now, 2nd version is available see: http://www.openssh.com/txt/buffer.adv
> 
> According to this advisory Debian package SSH 1:3.4p1-1.1 is still
> vulnerable.

This was discussed last night, and I understand that a new version is
being prepared by the security team.

Cheers,

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]