OpenSSH 2.9p2 / SSH3 vulnerability?

[Theo E. Schlossnagle]

Ault, James R (CRD) wrote:
> 2) There is a "SECURID" patch in the contrib section since 2.5.2p2.
> I am using it, but applying this patch to each new version is growing
> more difficult as time goes on.  Would you consider merging this
> function into the core of openssh? (with a configure flag and
> everything)?  I would certainly appreciate it...

The newest version of this patch is always available at:

http://www.omniti.com/~jesus/projects/

(as it says in the diff included with openssh).

I was latent in getting the OpenSSH maintainer the 2.9p2 patch (read: never 
sent it).  I will try to be better about that for next release.

-- 
Theo Schlossnagle
1024D/82844984/95FD 30F1 489E 4613 F22E  491A 7E88 364C 8284 4984
2047R/33131B65/71 F7 95 64 49 76 5D BA  3D 90 B9 9F BE 27 24 E7