OpenSSH Security Advisory (adv.token)

[Damien Miller]

On Wed, 24 Apr 2002, Frank Smith wrote:

> from where did you get openssh version 3.3?  as of today (24 apr), openssh's
> website listed version 3.1p1 as the current version.

There is no 3.3 yet, the next release will probably be 3.2.1 (and will
close the hole). If you haven't build OpenSSH with KrbIV *and* AFS
support, you aren't vulnerable anyway.

-d