We have linux 8.0 (Pretty Old). Following is the relevant info.


#uname -a
Linux X.com 2.4.20-20.8smp #1

[root@X openssh-3.9p1]# rpm -qa | grep ssh
openssh-clients-3.4p1-7
openssh-3.4p1-7
openssh-askpass-gnome-3.4p1-7
openssh-server-3.4p1-7
kdessh-3.0.5a-1
openssh-askpass-3.4p1-7


Now we would like to upgrade the openssh pack to the possible latest version.
I know this is pretty simple task. But still I have some questions to be asked .
Once I get a response from you GURU's , will start asking my queries.
So please start of with the procedure to upgrade the openssh package.
Thanx in advance.

Are you speaking or Red Hat 8.0? If so, you're probably going to have an easier time just upgrading to a later version of Red Hat itself as there have been numerous security updates since 8.0.

With that in mind, there's probably not a lot of already pre-compiled RPM's for an easy installation and you would have to satisfy a lot of dependencies.

You're only choice most likely in the matter would be to get a source rpm and build it yourself and or install by source. But I would recommend to upgrade the OS itself, upgrading just SSH isn't going to make your machine that much more secure.

You are right!!!. I agree with you on this completely. But as you might know , management is not willing to go for whole upgradation at the moment. They have ran a tool which detected openssh to be vulnerable. So the orders have come to upgrade the same.
Now the option of going ahead with SOURCE RPM looks good but I am really unaware with the process of installing SRPMS .

I have the standard list of commands which I will put it here. Just correct me if I'm wrong.


# rpmbuild --rebuild package_name.src.rpm
# rpm -Uvh /usr/src/redhat/RPMS/i386/package_name.i386.rpm

Once this is done .... can we conclude as we have upgraded the OPENSSH on a system??