OpenSSH timing vulnerability

[perl user]

i've been searching around but haven't found a definitive answer, does
this affect redhat 6.2? i checked w/ RHN (redhat network) and they
list only version of 7.2 and newer as being potentially affected and
only have patches for these versions.. i need to know if it is because
versions prior to 7.2 aren't affected or if it's because ver 6.2 is
too old and they don't support it anymore. thanks in advance!

[Patrick Lamb]

On 20 Aug 2003 14:32:58 -0700, r230sl55@yahoo.com (perl user) wrote:

>i've been searching around but haven't found a definitive answer, does
>this affect redhat 6.2? i checked w/ RHN (redhat network) and they
>list only version of 7.2 and newer as being potentially affected and
>only have patches for these versions.. i need to know if it is because
>versions prior to 7.2 aren't affected or if it's because ver 6.2 is
>too old and they don't support it anymore. thanks in advance!

(1) Redhat 6.2 is too old and isn't supported any more.

(2) IIRC, Redhat never supplied OpenSSH (or any other ssh) as part of
their 6.2 distribution. If you have a RH 6.2 system with OpenSSH, it
was installed from source or from one of the third-party rpm
packagers.