version 1.241, 2000/05/29 07:58:46 |
version 1.242, 2000/06/06 18:45:37 |
|
|
<a name=all></a> |
<a name=all></a> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<li><h3><font color=#e00000>All architectures</font></h3> |
<ul> |
<ul> |
|
<a name=uselogin></a> |
|
<li><font color=#009000><strong>005: SECURITY ALERT: June 6, 2000</strong></font><br> |
|
The non-default UseLogin feature in <b>/etc/sshd_config</b> is broken and should not |
|
be used. On other operating systems, it results in a hole. Avoid use of this |
|
feature, or update to OpenSSH 2.1.1 or later if you must use it. |
|
<p> |
<a name=ipopts></a> |
<a name=ipopts></a> |
<li><font color=#009000><strong>005: RELIABILITY FIX: May 29, 2000</strong></font><br> |
<li><font color=#009000><strong>005: RELIABILITY FIX: May 29, 2000</strong></font><br> |
Parse IPv4 options more carefully. It is not yet clear if this can even be used |
Parse IPv4 options more carefully. It is not yet clear if this can even be used |