Bug in AIX password expiry code in 4.0p1

Darren Tucker dtucker at zip.com.au
Thu Mar 31 21:23:44 EST 2005


Hi all.

	There's a bug in sshd in the handling of the password expiry messages 
returned by AIX's authentication routines, which will cause sshd to 
segfault after password authentication if the user's password has expired 
or is about to expire.  It was originally reported by Rob v.d. Wal.  It 
doesn't affect any other platforms.

	I recommend that anyone deploying 4.0p1 on AIX systems apply the patch in 
the following bug, or wait for the 4.1p1 release (which will be some time 
in the next couple of weeks).  My apologies for any inconvenience caused.

http://bugzilla.mindrot.org/show_bug.cgi?id=1006

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.




More information about the openssh-unix-dev mailing list