Slashdot Mirror
New Vulnerabilities in Portable OpenSSH
An anonymous reader writes "The OpenSSH team has uncovered multiple exploitable vulnerabilities in the days-old portable release of OpenSSH. That's right folks: time to patch *again*. 3.7.1p2 is now available. Instructions and mirror list here. Please note that this vulnerability only affects *portable* OpenSSH--so if you are running OpenBSD, you're safe. This vulnerability apparently has to do with PAM, so you can use the 'UsePam no' option in your config file. Info on the advisory here and here."
The PAM support in that version of portable OpenSSH is broken, anyway. They ripped the old PAM support out and replaced it with something half-done.
That's why I backported the security patches, instead of upgrading. Now I'm glad that I did.
You mean the Windows version of putty is still secure and open source isn't? for shame! Go ahead anti MS fascists. Mod me down. If I had said it the other way around it would be +5 informative. I use both and the only reason I still use MS is because the programs I want to run won't run on *nix. They've had years to make it work and haven't yet even in beta. Make Quicken and my games work in *nix and my path to the dark side will be complete.
Two roads diverged in a wood, and I - I took the one the bus load of girls just went down.