[USN-612-2] OpenSSH vulnerability

[Felipe Figueiredo]

John,

On Tue, May 13, 2008 at 3:28 PM, John Bulcher <jbulcher at starkart.net> wrote:
> I've updated openssh-server and openssh-client to the latest version on
> c0003, nestor, casper, iliad, and ghost. The update for Ubuntu 8.04 was as
> indicated below, however, the update for Ubuntu 7.10 was not - instead of a
> version number of 1:4.6p1-5ubuntu0.3, this version was skipped and the
> version installed was 1:4.6p1-5ubuntu0.4. It might be worth keeping in mind.

Then you're late. It should have skipped to 1:4.6p1-5ubuntu0.5
instead. Please see USN-612-5. There was a regression, and a bug fixed
after the advisory you mentioned.

regards
FF