Re: [Full-Disclosure] re: openssh exploit code?

[Shawn McMahon]

Frank Knobbe wrote:

heh... Nothing wrong with that statement. However, the severity of the
issue (DoS vs. remote-root) would be helpful in determining if admins
should yank the boxes during production, or wait to patch after hours.

Especially if one has boxes for which "after hours" is "once a quarter"
or "never".

I've got projects with both.

file:///tmp/nsmail.tmp

Description: PGP signature


pgp00000.pgp

Description: PGP signature