Vulnerability Development mailing list archives

Re: OpenSSL Vulnerability and OpenSSH


From: Markus Friedl <markus () openbsd org>
Date: Mon, 23 Sep 2002 10:24:53 +0200

On Sat, Sep 21, 2002 at 09:43:48AM -0700, nestler () speakeasy net wrote:
On Fri, Sep 20, 2002 at 09:05:59AM -0400, Eric Maiwald wrote:
Does anyone
know if the same issues affecting OpenSSL on Apache will affect OpenSSL
when used with OpenSSH?

yes.

the "issues affecting OpenSSL on Apache" do not affect OpenSSH.

OpenSSH does not use libssl (only libcrypto).

You seem to imply that all of OpenSSL's problems are in libssl,
which is not the case.

no. it does not. i just refer to "issues affecting OpenSSL on Apache".


Current thread: