Hi Lisi, Lisi Reisz: > On Monday 26 September 2016 12:48:00 Stephan Beck wrote: >> Well, I better rephrase because that was a bit misleading! >> >> I pray for the OpenSSH package being patched >> soon in Jessie with respect to its OpenSSL component! > > Could you explain why "****openssl**** regression update" is not at least > part > of the OpenSSL component? (Though I can see it might be the wrong bit of the > component, and not what you were meaning.) >
If you look at the second line of the terminal output I reproduced, you find that the openssl component in use within the package openssh Debian Jessie is one step behind. "Standalone" OpenSSL package is now at version 1.0.1t-1+deb8u5 since September 23. > me@mymachine:~/.ssh$ ssh -vv me@theremoteserver > OpenSSH_6.7p1 Debian-5+deb8u3, OpenSSL 1.0.1t 3 May 2016 Cheers, Stephan
