[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:38255] Re: [SECURITY] [DSA-382-1] OpenSSH buffer management fix

From: YOSHIFUJI Hideaki / 吉藤英明 <yoshfuji@xxxxxxxxxxxxxx>
Subject: [debian-users:38255] Re: [SECURITY] [DSA-382-1] OpenSSH buffer management fix
Date: Wed, 17 Sep 2003 12:36:51 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
Organization: USAGI Project
X-face: "5$Al-.M>NJ%a'@hhZdQm:."qn~PA^gq4o*>iCFToq*bAi#4FRtx}enhuQKz7fNqQz\BYU] $~O_5m-9'}MIs`XGwIEscw;e5b>n"B_?j/AkL~i/MEa<!5P`&C$@oP>ZBLP
X-fingerprint: 90 22 65 EB 1E CF 3A D1 0B DF 80 D8 48 07 F8 94 E0 62 0E EA
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-pgp-key-url: http://www.yoshifuji.org/%7Ehideaki/hideaki@xxxxxxxxxxxxxxxxx
X-sender: "Hideaki YOSHIFUJI" <yoshfuji@xxxxxxxxxxxxxxxxxxxxxxxxx>
X-spam-level:
X-spam-status: No, hits=-2.7 required=10.0 tests=ISO2022JP_BODY,QUOTED_EMAIL_TEXT,SIGNATURE_SHORT_DENSE, SPAM_PHRASE_00_01 version=2.44
X-url: http://www.yoshifuji.org/%7Ehideaki/
References: <20030916184131.GA7504@xxxxxxxxx>
Message-id: <20030917.123740.33995910.yoshfuji@xxxxxxxxxxxxxx>
X-mail-count: 38255
X-mailer: Mew version 2.2 on Emacs 20.7 / Mule 4.1 (AOI)

In article <20030916184131.GA7504@xxxxxxxxx> (at Tue, 16 Sep 2003 20:41:32 +0200), Wichert Akkerman <wichert@xxxxxxxxx> says:

> Package        : ssh
> Vulnerability  : buffer handling
> Problem type   : possible remote
:

> This bug has been fixed in upstream version 3.7. For the Debian stable
> distribution this bug has eeb fixed in version 1:3.4p1-1.1 .

この勧告は3.7相当にするもので、不十分です。
3.7.1相当にする必要があります。
packageは対応中のようです。
続報に注意。

-- 
Hideaki YOSHIFUJI @ USAGI Project <yoshfuji@xxxxxxxxxxxxxx>
GPG FP: 9022 65EB 1ECF 3AD1 0BDF  80D8 4807 F894 E062 0EEA

Follow-Ups:
- [debian-users:38256] Re: [SECURITY] [DSA-382-1] OpenSSH buffer management fix
  - From: Hideki Yamane

Prev by Date: [debian-users:38254] Re: [SECURITY] [DSA-382-1] OpenSSH buffer management fix
Next by Date: [debian-users:38256] Re: [SECURITY] [DSA-382-1] OpenSSH buffer management fix
Previous by thread: [debian-users:38254] Re: [SECURITY] [DSA-382-1] OpenSSH buffer management fix
Next by thread: [debian-users:38256] Re: [SECURITY] [DSA-382-1] OpenSSH buffer management fix
Index(es):
- Date
- Thread