From owner-freebsd-questions Tue Jul 16 13:50:18 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 32E4537B400 for ; Tue, 16 Jul 2002 13:50:14 -0700 (PDT) Received: from mail.smed.com (mail.smed.com [64.46.248.225]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7BD4F43E65 for ; Tue, 16 Jul 2002 13:50:13 -0700 (PDT) (envelope-from Joseph.Warner@siemens.com) Received: from smtpgate.smshsc.net (unknown [165.226.204.25]) by mail.smed.com (Postfix) with ESMTP id DC55348230 for ; Tue, 16 Jul 2002 16:50:07 -0400 (EDT) Received: from iesa14.smshsc.net (iesa14.smshsc.net [165.226.204.44]) by smtpgate.smshsc.net (8.11.6/8.11.6) with ESMTP id g6GKo7p04255 for ; Tue, 16 Jul 2002 16:50:07 -0400 Received: from mlvexc01.smshsc.net (unverified) by iesa14.smshsc.net (Content Technologies SMTPRS 2.0.15) with ESMTP id ; Tue, 16 Jul 2002 16:44:35 -0400 Received: by mlvexc01.usmlvv1p0a.smshsc.net with Internet Mail Service (5.5.2655.55) id <3W66G1QT>; Tue, 16 Jul 2002 16:44:38 -0400 Message-Id: From: Warner Joseph To: "'Joshua Lee'" Cc: freebsd-questions@freebsd.org Subject: RE: Upgrading SSH Date: Tue, 16 Jul 2002 16:44:35 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2655.55) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG >cvsup and so-called make world I'm familiar with this and run 'make world' often in order to stay up to date. However, it's my understanding that Openssh-3.4 wasn't included with the base install, meaning that simply running cvsup and doing a 'make world' would still leave you with the vulnerable version. Is this incorrect? FWIW, I was able to upgrade to 3.4 by killing the current sshd daemon job, installed /usr/ports/security/openssh and then changed the "Enable SSH" line in /etc/rc.conf to "NO" Lastly, I copied sshd.sh.sample to sshd.sh in /usr/local/etc/rc.d/ and issued: /usr/local/etc/rc.d/./sshd.sh start Thanks should go to Scott Robbins for helping me with this on 7/2 Thanks Joe Siemens - Health Services Joe Warner Operations Technical Analyst II 215 North Admiral Byrd Rd., Salt Lake City, UT 84116 Ph: 801-539-4978 Fax: 801-533-8004 -----Original Message----- From: Joshua Lee [mailto:yid@softhome.net] Sent: Tuesday, July 16, 2002 1:33 PM To: Warner Joseph Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Upgrading SSH On Tue, 2 Jul 2002 09:49:33 -0400 Warner Joseph wrote: > Could someone tell me the safest way to upgrade to Openssh-3.4? The most thorough way to keep up with this and any other security updates is to periodically run cvsup and so-called make world. See the handbook and http://www.google.com/bsd for details. ------------------------------------------------------------------------------- This message and any included attachments are from Siemens Medical Solutions Health Services Corporation and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail with a copy to CSOffice@smed.com. Thank you To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message