Ubuntu's multisearch surprise
Ubuntu's multisearch surprise
Posted Aug 9, 2009 10:29 UTC (Sun) by dtucker (subscriber, #6575)In reply to: Ubuntu's multisearch surprise by MattPerry
Parent article: Ubuntu's multisearch surprise
> The packager did seek feedback from the OpenSSH team about their change
> and was told it was okay. But they continued to make further changes to a
> similar piece of code that introduced a security issue.
> and was told it was okay. But they continued to make further changes to a
> similar piece of code that introduced a security issue.
The incident I think you're referring to (http://lwn.net/Articles/282038/) was a change to OpenSSL, not OpenSSH. OpenSSH was impacted because it uses OpenSSL's RNG functions but it wasn't the location of the change in question.