• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Linux - upgrade RPM package with compiled?

B

Batti

Golden Member
I have several Mandrake boxes with OpenSSH on them, installed via a Mandrake RPM. A security hole has been found, and a new version of OpenSSH is out now, but there aren't any Mandrake RPM's yet. Should I uninstall the RPM before I compile the new version and install it?

Haven't ventured into these waters yet...
 
yes. remove them first if you really want from a tarball. i would go grab the RH 7 .src.rpm from the openssh ftp site and recompile that and then upgrade
 
Which version of openssh are you running? Mandrake had the fix out for this way back in Nov 2000 and released openssh-2.3.0p1-7.3 to fix it.

If you're running that version you should be fine. If not, then you can grab those updates from the updates/7.0/RPMS/ section on your favorite mirror...or you can grab the src.rpm as BOFH suggests and rebuild/compile it yourself. 🙂

Oh, link to Mandrake's notice on this for you: MandrakeSoft Security Advisory
 
The new version is 2.5.1 and that's what I'm looking for. I'm upgrading several machines from various versions.

Thanks for the information!
 
Heh. I'll be danged. You're right. I knew about the exploits and the Debian folk released their patched version of 2.3.0p1 to fix shortly thereafter, but I missed the upage to 2.5.1.

Thank YOU!.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top