Re: OpenSSH packages for Fedora

[Satish Balay <balay fastmail fm>]

On Wed, 4 Feb 2004, Shanafelt, Gabe wrote:

> As there are two vulnerabilities for the current version of OpenSSH
> (3.6.1p2-19) for Fedora Core 1 (http://www.openssh.org/security.html) I was
> wondering when the (3.7.1p2) packages are going to come out for Fedora Core
> 1?

I guess you can verify the individual bug numbers - but they are
backported to the current distribution version..

For eg: from changelog on FC1 (openssh-3.6.1p2-19)
rpm -q --changelog openssh | less

>>>>>>>>>
* Tue Sep 16 2003 Bill Nottingham <notting redhat com> 3.6.1p1-14

- additional buffer manipulation fixes (CAN-2003-0695)

>>>>>>>
* Tue Sep 16 2003 Nalin Dahyabhai <nalin redhat com> 3.6.1p1-11

- apply patch to store the correct buffer size in allocated buffers
  (CAN-2003-0693)
>>>>>>>>>


Satish