Fedora Users — Re: what is the latest version of openssh-server

Re: what is the latest version of openssh-server

Date Prev

Date Next

Thread Prev

Thread Next

Date Index

Thread Index

To: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>

Subject: Re: what is the latest version of openssh-server

From: Jeremiah Foster <jeremiah.foster@xxxxxxxxx>

Date: Tue, 10 May 2005 17:00:17 +0200

Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:x-accept-language:mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding; b=SnywDnnzQ0hL534XgcGOw3gwgHf5uiflrPS5tM/QM1PWNIFe+wcw1nhMy9mJrRo3JtgRTX0bDIbXSTrhYanHKzxxrEPou6DkZnu+QL7CC9/63txHJLoP1hpp5UznbXFvDMmNu5DCAGArw3/V/WFfRfXJQER9iQf/xBOBARSCp9M=

In-reply-to: <[email protected]>

List-archive: <https://www.redhat.com/archives/fedora-list>

List-help: <mailto:[email protected]?subject=help>

List-id: For users of Fedora Core releases <fedora-list.redhat.com>

List-post: <mailto:[email protected]>

List-subscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=subscribe>

List-unsubscribe: <http://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=unsubscribe>

References: <[email protected]>

Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>

User-agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.5) Gecko/20041217

jim martin wrote:

Hi.. We are using openssh-server-3.9p1-7 for our FC3 box,
[root@wa ]# rpm -qa | grep openssh-server
openssh-server-3.9p1-7
however our auditor want us to upgrade from Openssh protocol '1' to '2'

The protocol your auditor speaks of is built into most newer versions of openssh, so in fact you do not have to upgrade the openssh software if you want to use protocol 2. Read up about the different protocols in openssh to find out more, maybe start with

$ man ssh

at the command line. For example it says;

Protocol 2 provides additional mechanisms for confidentiality (the traf- fic is encrypted using 3DES, Blowfish, CAST128 or Arcfour) and integrity (hmac-md5, hmac-sha1). Note that protocol 1 lacks a strong mechanism for ensuring the integrity of the connection.

it means I need to upgrade to openssh-server-3.9p2..
right??

No.

But when I do a

[root@wa]# up2date --showall | grep openssh-server
openssh-server-3.9p1-8.0.1.i386

It is still p1 only

I log on to https://rhn.redhat.com/ and did a search
on openssh-server package. those available are all p1
only.  Am I going to the right URL for FC3 ??

You may want to download the latest version of openssh, it is available from http://www.openssh.com/portable.html

The latest version was released in March and is version 4.0p1. Note that If you are using certain older versions of openssh you may be at risk. See today's New York Times for more information.

Jeremiah