I'm a mandrake 9 user. And I've noticed that Red Hat has freely accessible rpms which upgrade the latest openssh vulernerabilities.

I'm not able to find anywhere which has mandrake rpms for upgrading this problem.

Question 1) Does anyone know where to get official or reliable mandrake rpms to upgrade openssh 3.4 which came with mandrake 9

Assuming I cant get an rpm. I'm going to download the tar.gz from openssh.org.

Question 2) Should I uninstall the openssh 3.4's rpm before installing the source version, so my system knows which version to use?

http://rpmfind.net/linux/rpm2html/se...?query=openssh

Checked here?

yes. i checked rpmfind. they don't have a version 3.7 for mandrake or the proper upgrade to 3.4, the version of 3.4 they have was built in apr 2003, that can't have the proper fix.

i found this security advisory:
http://www.mandrakesecure.net/en/adv...KSA-2003:090-1
and the ftp site for mandrake
http://www.mandrakesecure.net/en/ftp.php

which tells you to upgrade to 3.6.1 but that's not working.

anyone have an answer for my second question?

just incase anyone had the same problems, i was able to upgrade the rpms from mandrakesecure.net they didnt actually list all the ones you needed to install, there were some dependencies with libopenssl0

if anyone does know the answer to my second question, i am still interested for my personal knowledge's sake