[Gllug] [Fwd: SSH Security Advisory: Centos (and other distros)]

[Richard Jones]

On Wed, Jul 08, 2009 at 08:32:08AM +0100, Andy Millar wrote:
> On Wed, 2009-07-08 at 08:23 +0100, Jon Fautley wrote:
> > 
> > So you've got an email from someone asking you to go and install some
> > "random" SSH RPMs from a non-vendor site, because of a security hole
> > they're not disclosing (or, in fact, confirming)?
> 
> Given that we have Red Hat Employees people on this list, can anyone
> from Red Hat actually confirm or deny that this is an issue.

This is the tracking bug & the current status:

https://bugzilla.redhat.com/show_bug.cgi?id=510118#c6

Rich.

-- 
Richard Jones
Red Hat