OpenSSH vulnerability warning

[Aurel Wisse]

Dan,

I am using YDL-2.2 but upgraded the kernel to
2.4.19-pre10-ben0.

What is the best path here:
a) install the 2.2 upgrade rpm,
b) install the 2.3 upgrade rpm,

or is it bettor to recompile following Christoper's
instructions?

Aurel
--- Dan Burcaw <dburcaw@terrasoftsolutions.com> wrote:
> 
> OpenSSH updates for 2.2 and 2.3 have been pushed to
> our master site
> along with apache updates.. this means they will
> mirror this evening.
> I've also setup a temporary site to get these
> updates NOW.  The cavaet
> being that this url does not support apt-get
> updating... just manual
> download and install. I've done it due to the
> mirrors still being
> tight from the YDL 2.3 push, and general congestion.
> 
> ftp://ftp.terraplex.com/updates/
> 
> 
> 
> On Tue, 2002-06-25 at 10:53, Christopher Murtagh
> wrote:
> > 
> >  Just a heads up to anyone who might not have seen
> it:
> > 
> >
>
http://marc.theaimsgroup.com/?l=openbsd-announce&m=102497569424297&w=2
> > 
> >
>
http://slashdot.org/article.pl?sid=02/06/24/1912215&mode=thread&tid=167
> > 
> >  According to the above, if you aren't running
> OpenSSH 3.3, you will
> > probably want to upgrade ASAP and turn on
> UsePrivilegeSeparation. By the
> > sounds of it, there is a nasty exploit that will
> be made public soon.
> > 
> >  Tough luck for Terra Soft, this is the second
> OpenSSH vulnerability that
> > came right *after* a new YDL release. :-( So,
> when's YDL 2.4 coming out.
> > :-)
> > 
> > Cheers,
> > 
> > Chris
> > 
> > -- 
> > 
> > Christopher Murtagh
> > Webmaster / Sysadmin
> > Web Communications Group
> > McGill University
> > Montreal, Quebec
> > Canada
> > 
> > Tel.: (514) 398-3122
> > Fax:  (514) 398-2017
> > 
> > 
> > _______________________________________________
> > yellowdog-general mailing list
> > yellowdog-general@lists.terrasoftsolutions.com
> >
>
http://lists.terrasoftsolutions.com/mailman/listinfo/yellowdog-general
> 
> _______________________________________________
> yellowdog-general mailing list
> yellowdog-general@lists.terrasoftsolutions.com
>
http://lists.terrasoftsolutions.com/mailman/listinfo/yellowdog-general


__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com