* dann frazier:

> Micah, Thanks for detecting this; however, I don't think
> systemimager-ssh is vulnerable.

Thanks for investigating this.

> Unfortunately, compression is not a build-time option for openssh, so it
> would be somewhat invasive to remove the unused zlib library.

This is unnecessary, and would make applying OpenSSH patches only more
difficult and time-consuming.

Shall we close this bug?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to