| |||||||||||||
Ubuntu's multisearch surpriseUbuntu's multisearch surprisePosted Aug 9, 2009 10:29 UTC (Sun) by dtucker (guest, #6575)In reply to: Ubuntu's multisearch surprise by MattPerry Parent article: Ubuntu's multisearch surprise
> The packager did seek feedback from the OpenSSH team about their change
> and was told it was okay. But they continued to make further changes to a > similar piece of code that introduced a security issue.
The incident I think you're referring to (http://lwn.net/Articles/282038/) was a change to OpenSSL, not OpenSSH. OpenSSH was impacted because it uses OpenSSL's RNG functions but it wasn't the location of the change in question.
(Log in to post comments)
Ubuntu's multisearch surprise Posted Aug 11, 2009 14:46 UTC (Tue) by MattPerry (guest, #46341) [Link]
Thanks for the correction. I knew it was one of those but had forgotten which one.
|
|||||||||||||