[TriLUG] Fwd: Upcoming OpenSSH vulnerability *unverified*

Dan Chen crimsun at email.unc.edu
Tue Jun 25 15:35:43 EDT 2002


On Tue, Jun 25, 2002 at 12:56:12PM -0400, Mike Johnson wrote:
> > of the changes.  However, for Linux you may need to add "Compression
> > no" to the sshd_config to prevent fatal mmap errors.
> 
> That's for 2.2 kernels.  It works fine on 2.4 based kernels.

Yup. And as I understand, most vendors are using some variant of Solar
Designer's patch for 2.2 kernels. There's also a quick hack in OpenSSH's
Bugzilla.

-- 
Dan Chen                 crimsun at email.unc.edu
GPG key:   www.unc.edu/~crimsun/pubkey.gpg.asc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://www.trilug.org/pipermail/trilug/attachments/20020625/720b131e/attachment.pgp>


More information about the TriLUG mailing list