[Secure-testing-team] libpam-ssh embeds code from OpenSSH.

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Sep 29 17:24:50 UTC 2010


hi testing team---

more grist for the EmbeddedCodeCopies mill:

libpam-ssh embeds at least authfile.c from OpenSSH, including code that
deals with sensitive cryptographic material :(

I just filed http://bugs.debian.org/598522 about it.

thanks,

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20100929/7506431f/attachment.pgp>


More information about the Secure-testing-team mailing list