OpenSSH 3.3 released! *update! go to 3.4! :(

[n0cmonkey]

Get it while its hot! 🙂

Some information on privilege separation

One remote hole in the default install, in nearly 6 years! 🙁

 

[bubba]

So, only v3.3 supports this?

Do you have to enable it, or is it now always on?

 

[n0cmonkey]

Originally posted by: bubba
So, only v3.3 supports this?

Do you have to enable it, or is it now always on?

I believe they enabled it by default in v3.3

 

[nuttervm]

I wish the openbsd crew would take some inspiration from the gentoo people. I'd love to just type 'emerge update' or something on my obsd box. I'd even settle for putting apache and openssh in the ports collection so you could upgrade it easier. maybe make use of freebsd's portupgrade, which seems like an awesome tool. sigh...

i'm downloading the source needed to patch my box now for the apache hole (haven't had time to do it before)

 

[Rainsford]

w00t, upgraded it during some slow time here at work. Hmm, only in a Unix-like OS would I be able to upgrade a program while connected through that program.

 

[n0cmonkey]

bump

 

[bubba]

Oh oh:

http://online.securityfocus.com/archive/1/279021/2002-06-22/2002-06-28/0

It looks like privlege separation will help, but still holes that may not yet be exploited....

 

[n0cmonkey]

Originally posted by: bubba
Oh oh:

http://online.securityfocus.com/archive/1/279021/2002-06-22/2002-06-28/0

It looks like privlege separation will help, but still holes that may not yet be exploited....

[i

Last advisory I saw.

Best solution: 3.4 🙁

 

[bubba]

I wish they would upload the v3.4 RPMs, as it is easier for me to push out updates to all the machines if I just script an rpm command...

 

[Electrode]

<< One remote hole in the default install, in nearly 6 years! >>

:Q

Well, there goes their biggest selling point. Still better than anything else though.

 

[n0cmonkey]

Originally posted by: Electrode
<< One remote hole in the default install, in nearly 6 years! >>

:Q

Well, there goes their biggest selling point. Still better than anything else though.

Thats not the selling point. The little "motto" isnt a big deal at all.

 

[Kai4Linux]

There are some rpms,... but from MAndrake cooker.... rpmfind.net

 

[Barnaby W. Füi]

i'm losing track of all the updates 😛

apache, ssh, ssh, gaaahh

apt is a lazy mans best friend. i actually found out about 3.4 when i apt-get upgraded 😛

 

[n0cmonkey]

Originally posted by: BingBongWongFooey
i'm losing track of all the updates 😛

apache, ssh, ssh, gaaahh

apt is a lazy mans best friend. i actually found out about 3.4 when i apt-get upgraded 😛

Its definitely been a busy week...

 

[Workin']

apt is a lazy mans best friend.

Or a busy man's best friend! That's why I love Debian - once you're set up and configured "apt-get update" followed by "apt-get dist-upgrade" every day helps keep the baddies away and takes only a few minutes.

 

[mcveigh]

Originally posted by: Workin'

apt is a lazy mans best friend.

Or a busy man's best friend! That's why I love Debian - once you're set up and configured "apt-get update" followed by "apt-get dist-upgrade" every day helps keep the baddies away and takes only a few minutes.

gentoo "emerge -u world"