Help needed.. Urgent.. Rhel 5.5 openssh upgrade from 4.3p2
 

Hello All,

I am running RHEL 5.5 on my server and by default the openssh version is 4.3p2. But my client is very particular that I upgrade the openssh to the latest version available as he says there are security vulnerabilities in 4.3p2. I have searched for the RPM for the same in a lot of places and could not find anything above 4.3p2. It is not available even on the RH website.
Please find below all the information regarding the release of my server

cat /proc/version
Linux version 2.6.18-194.el5 (mockbuild@x86-005.build.bos.redhat.com) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Tue Mar 16 21:52:39 EDT 2010

lsb_release -a
LSB Version: :core-3.1-amd64:core-3.1-ia32:core-3.1-noarch:graphics-3.1-amd64:graphics-3.1-ia32:graphics-3.1-noarch
Distributor ID: RedHatEnterpriseServer
Description: Red Hat Enterprise Linux Server release 5.5 (Tikanga)
Release: 5.5
Codename: Tikanga

uname -a
Linux abc.ae 2.6.18-194.el5 #1 SMP Tue Mar 16 21:52:39 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux

The server does not have connectivity to the internet and hence yum is not an option.
Your help will be highly appreciated.

Thanks
R. Sriram

You need to check the release notes to see if RH has backported the require fixes; its what they do :)
Also, RHEL5 is now on 5.8; you might want to think about updating generally.

Theoretically you could install from src (eg http://www.openssh.com/portable.html), but then it would not be under rpm/yum ctrl and would also NOT be supported by RH....

Hello All,

Please find below reply from Red Hat for the open SSH upgrade for RHEL 5.5.
Hope this helps anyone in the future.

The most recent version of openssh available for the RHEL 5 series is openssh-4.3p2-82.el5, part of RHEL 5.8. These releases often have several back-ported security patches made against them, so even though it is the same major version number, the -82 indicates that there have been a number of fixes applied.

Thanks for your inputs.

Rgds
R. Sriram