September 16, 2003
New OpenSSH exploit
Well, this morning I was privy to a discussion and viewing of a new OpenSSH exploit running around. Slashdot even has a thread on this now.
Although very few sources have a patch in their respective package trees (nothing in apt tree as of 30 minutes ago), you can either upgrade to OpenSSH 3.7 or grab the patch here and compile it yourself.
Happy patching.Posted by SilverStr at September 16, 2003 10:07 AM