<html><head></head><body><div style="color:#000; background-color:#fff; font-family:lucida console, sans-serif;font-size:13px"><div dir="ltr" id="yui_3_16_0_1_1453608783153_15136"><span id="yui_3_16_0_1_1453608783153_15234">Now I understand the email thread about malware. <br></span></div><div id="yui_3_16_0_1_1453608783153_15262" dir="ltr"><span id="yui_3_16_0_1_1453608783153_15234"><br></span></div><div id="yui_3_16_0_1_1453608783153_15263" dir="ltr"><span id="yui_3_16_0_1_1453608783153_15234">A weakness has been found. Here is how to patch the hole.</span></div><div id="yui_3_16_0_1_1453608783153_15307" dir="ltr"><br><span id="yui_3_16_0_1_1453608783153_15234"></span></div><div id="yui_3_16_0_1_1453608783153_15309" dir="ltr"><span id="yui_3_16_0_1_1453608783153_15234">Hopefully a better fix will be forthcoming. When it is, the standard package manager tools will install it.</span></div><div id="yui_3_16_0_1_1453608783153_15334" dir="ltr"><br><span id="yui_3_16_0_1_1453608783153_15234"></span></div><div id="yui_3_16_0_1_1453608783153_15319" dir="ltr"><span id="yui_3_16_0_1_1453608783153_15234">No need for everyone to run software looking for attempts to exploit the hole after it has been closed.</span></div><br> <div id="yui_3_16_0_1_1453608783153_15137" class="qtdSeparateBR"><br><br></div><div style="display: block;" id="yui_3_16_0_1_1453608783153_15141" class="yahoo_quoted"> <div id="yui_3_16_0_1_1453608783153_15140" style="font-family: lucida console, sans-serif; font-size: 13px;"> <div id="yui_3_16_0_1_1453608783153_15139" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div id="yui_3_16_0_1_1453608783153_15138" dir="ltr"> <font id="yui_3_16_0_1_1453608783153_15148" face="Arial" size="2"> <hr id="yui_3_16_0_1_1453608783153_15251" size="1"> <b><span style="font-weight:bold;">From:</span></b> Rick Moen <rick@linuxmafia.com><br> <b><span style="font-weight: bold;">To:</span></b> conspire@linuxmafia.com <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, January 22, 2016 4:58 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> [conspire] OpenSSH client 'roaming' bug<br> </font> </div> <div id="yui_3_16_0_1_1453608783153_15143" class="y_msg_container"><br>Something y'all need to fix: CVE-2016-0777 and CVE-2016-0778.<br>...<br><br>The way to fix this is ...<br></div> </div> </div> </div></div></body></html>