openssh 3.7.1p1 needs a patch to compile against openssl-0.9.7a

[Michael A. Peters]

On Thu, 2003-09-18 at 09:32, Kevin B. Hendricks wrote:
> Hi,
> 
> I tried yum-update on openssh to get the latest security patch but it seems to 
> come back with openssh-3.5 and not the very latest version openssh-3.7.1p1
> that is the version with  the security fix.
> 
> Is this a mistake or have the required security patches been backported to 
> this version?

The patch has been backported.
Generally this is a better practice than forcing a new version on a user
because new versions may have different config options and may break
existing software and scripts that are expecting things to work in the
identical manner as the version that shipped.

I don't think there are any issues with updating to the very latest -
but it usually is general policy at distro's to backport security and
bug fixes into the version they shipped for ALL software - unless doing
so really isn't an option.