upgrade to ssh please help

juanb · 10-03-2005, 11:02 AM

Hi,

I use fedora 4 I am using open ssh version 1.6.

I want to upgrade it to the latest open ssh beacuse of a volunrability found in 1.6 version.

I didnt installed ssh throw rpm but now I want to upgrade throw an rpm packge. how I do that properly? or shouldnt I use rpm now? and just compilt it myself?

also I ran yun few times but it didnt upgraded ssh is it beacuse I didnt installed it throw rpm in the first place?

thanks very much !

Juan

juanb · 10-03-2005, 11:17 AM

in the last sentence I ment:

also I ran yun few times but it didnt upgraded ssh is it beacuse I didnt installed it throw RPM ssh in the first place?

bulliver · 10-03-2005, 08:21 PM

How did you install the first time?

If it was from source you will not be able to remove it automatically.

I would suggest just using the rpm, it should overwrite the old files.

Restart the server and use 'ssh -V' to check it is the new one.

TruckStuff · 10-03-2005, 09:05 PM

Quote:

Originally posted by juanb
I use fedora 4 I am using open ssh version 1.6.

I want to upgrade it to the latest open ssh beacuse of a volunrability found in 1.6 version.

Ehhh...

Why would you install a version of SSH over three years old onto a new OS???

stickman · 10-03-2005, 09:19 PM

Are you sure it's 1.6? I think FC4 comes with OpenSSH 4.1. There are updates for 4.2p1 on the Fedora site.

juanb · 10-04-2005, 10:39 AM

your all right my version is OpenSSH_3.6.1p2, so how I upgrade this version? I installed it from the distribution disks whan I installed the oeration system. it is not rpm.

thanks

Juan

tkedwards · 10-04-2005, 07:22 PM

Quote:

I installed it from the distribution disks whan I installed the oeration system. it is not rpm.

If you installed it off the OS installation disks then it is an RPM. You can get updates to the packages that come with Fedora by running

Code:

yum update

. You don't need to go around chasing the latest version number because Fedora backports all the security fixes from the latest Openssh into their updates. www.fedorafaq.org/#getsoftware

juanb · 10-05-2005, 03:30 AM

I used yum update how come it tells me that there isnt nothong to update in my ssh version is old?

thanks

Juan

tkedwards · 10-05-2005, 04:04 AM

Quote:

I used yum update how come it tells me that there isnt nothong to update in my ssh
version is old?

That's what I mean about backporting - the fedora people have taken the security fixes from the latest ssh release and backported them into their openssh 3.6 package. All major Linux distros do this, especially the pay-for 'enterprise' distros like RHEL and SLES, because its the only way to ensure a stable system where things work together.

If you look in the changelog for that RPM you should see mention of the security holes that have been dealt with.

spooon · 10-05-2005, 04:17 AM

What does it say when you do

Code:

rpm -qa openssh*

juanb · 10-05-2005, 04:58 AM

this is the output:
penssh-3.6.1p2-19
openssh-server-3.6.1p2-19
openssh-askpass-3.6.1p2-19
openssh-askpass-gnome-3.6.1p2-19
openssh-clients-3.6.1p2-19
I go to /etc/ssh to configure parameters for my ssh server.

Juan

tkedwards · 10-05-2005, 05:58 PM

Code:

rpm --changelog -q openssh

Will show what's in the changelog. However if you're running Fedora Core 4 you should get Openssh from the FC4 CDs or software repos using yum. Uninstall whatever openssh version you've got installed and reinstall it through yum or from the FC4 CDs. As stickman said before you should have got Openssh4.1 with Fedora 4 (http://download.fedora.redhat.com/pu...s/Fedora/RPMS/) so it should be on your CDs. You can then do a yum update to get the latest updates from Fedora.