Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

why publish this before the patches are out?


The patches are out.


It was arguably still not necessary to post the complete exploit chain/proof-of-concept on the same day, since the chaining of four different shared libraries present in Ubuntu probably does not immediately follow from the diff introduced by the fix.


where? i couldn't find them on the openssh webpage and my distro has not released a new openssh either.

edit: nvm. i see the release now. just no release for openbsd itself it seems.



> just no release for openbsd itself it seems.

It was posted to announce@openbsd.org a few hours ago. Binary patches are available through syspatch and source patches on the errata page.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: