Re: openssh version numbers...

2001-11-28 Thread Matteo Sisa
The current woody OpenSSH version is 2.9p2; that means (according to http://www.openssh.org/portable.html ) the 2nd version made by the Portability team of the "normal" (i.e. for OpenBSD) 2.9 version. Of course 2.9 stands for 2.9.0, not 2.9.9, so it is vulnerable to those (not very dangerous, IMHO)

Re: openssh version numbers...

2001-11-28 Thread Matteo Sisa
The current woody OpenSSH version is 2.9p2; that means (according to http://www.openssh.org/portable.html ) the 2nd version made by the Portability team of the "normal" (i.e. for OpenBSD) 2.9 version. Of course 2.9 stands for 2.9.0, not 2.9.9, so it is vulnerable to those (not very dangerous, IMHO

openssh version numbers...

2001-11-26 Thread Juha Jäykkä
Ok. I have the good old open ssh 2.3.0-something. Now http://openssh.org/security.html says it is not vulnerable to cookie deletion or source based access control vulnerabilities (only 2.5.x-2.9.x, excluding 2.9.9, are). This is fine as long as I try to get woody's open ssh, which is 2.9psomethin

openssh version numbers...

2001-11-26 Thread Juha Jäykkä
Ok. I have the good old open ssh 2.3.0-something. Now http://openssh.org/security.html says it is not vulnerable to cookie deletion or source based access control vulnerabilities (only 2.5.x-2.9.x, excluding 2.9.9, are). This is fine as long as I try to get woody's open ssh, which is 2.9psomethi