"Wolfgang S. Rupprecht" wrote:
> 
> perry@piermont.com (Perry E. Metzger) writes:
> > William Allen Simpson <wsimpson@greendragon.com> writes:
> > > Just in case no one has seen this:
> > >
> > > http://slashdot.org/articles/03/09/16/1327248.shtml?tid=126&tid=172
> > >
> > > So, I checked http://openssh.org/, and sure enough there was already a
> > > new version.  So far, so good.
> >
> > We already have a patch in -current and on the 1.6 branch, fyi.
> 
> The /usr/pkgsrc tree also installs the current 3.7.1 version.  Hats
> off the guys that got this out the door so quickly.  (I was about to
> patch my local copy of openssh's buffer.c when I noticed that anon-cvs
> was already updated.)
> 
Aha!  I knew that the src tree was patched, I'd checked: 
  http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ssh/

But I didn't realize that ssh was *also* in the pkgsrc tree.  That's 
the ticket!  I'll try that.
-- 
William Allen Simpson
    Key fingerprint =  17 40 5E 67 15 6F 31 26  DD 0D B9 9B 6A 15 2C 32