[Savannah-hackers] Re: URGENT: ssh exploit

[Paul Fisher]

On Wed, Jun 26, 2002 at 12:55:16PM -0400, Paul Fisher wrote:
> The root exploit information for openssh was released today.  
> savannah is wide open to attack.

This is incorrect, as the version of ssh on savannah is too old for
the attack to work.

I would still like to see ssh on savannah upgraded though, as the
privilege seperation code would be a good addition -- a worst case of
gaining access to a chroot'd jail is much than gaining root privs.