[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: security vs. potato?



On Wed, Feb 27, 2002 at 07:03:56AM -0600, will trillich wrote:
> according to packages.debian.org/ssh2 there is no ssh2 package
> available for potato/stable.
> 
> i suppose this is a conundrum for the developers -- normally
> security fixes are beamed back to potato in a hurry, but ssh
> (version 1) has security troubles, and to fix them would
> introduce a new package (ssh2) which is against 'stable'
> policy...
> 
> what's the fix for a potato production server? can ssh2 be had
> from nonstandard apt sources for potato?

Get ssh2 from elsewhere (not the ideal solution, but it works).

There's alcove labs (www.alcove.com), and I think there may be other
sources for ssh2... (The australian mirror seemed to have new ssl
packages under ftp.au.debian.org/debian-kde, IIRC -- not sure about 
ssh)

J.

-- 



Reply to: