This weeks Security Alerts

jeremy · 04-30-2002, 09:22 AM

In thie weeks Security Alerts we look at buffer overflows in OpenSSH, Squid, Listar/Ecartis, slrnpull, and IRIX's syslogd; problems in Sudo, MHonArc, and Mosix; and a local root hole and denial-of-service attack vulnerability in FreeBSD.

http://linux.oreillynet.com/pub/a/li...ecurities.html

--jeremy

sitrus · 05-01-2002, 03:49 AM

About the openssh-server exploit have a question. Is the version 3.2.1 earlier than 3.1p1?
I just can't find a version 3.2.1 from anywhere, that is why i'm little confused about this. even the openssh webpage says at the top that the newest release is 3.1.

unSpawn · 05-01-2002, 05:51 AM

Cuz the OpenSSH team splits OpenSSH in the OpenBSD version and the "portable" version (aka non-OBSD's) numbering it could be the OBSD already is "stable" at 3.2.1, while the last portable version is at 3.1p1.