confusion over RSAref vul w/OpenSS[HL]

Niels Provos provos at
Wed Dec 8 09:03:35 EST 1999

In message <m3903a2oos.fsf at>, Chris Saia writes:
>That message is nice and detailed, except it lacks an actual patch.
>The link points to OpenBSD library fixes, but they're not terribly
>useful if you don't run OpenBSD.  :)
The Bugtraq posting contained the relevant patches, have a look
The patches are only against RSAREF2, nothing else needs fixing.


More information about the openssh-unix-dev mailing list