updating system version of OpenSSH

[wo_shi_big_stomach]

Phil Schulz wrote:

> If you can't afford to upgrade the base OS and you
do not want to 
> install OpenSSH from the ports

Sorry, I wasn't clear. I have no problem installing or
upgrading OpenSSH from ports. Indeed, that's all I
know how to do.

My question is how to upgrade OpenSSH as included with
5.2.1. If a ports install will do this, great.

The more general question is how to upgrade system
software, especially in cases where it's not included
in the ports collection.


--- "greg at grokking.org" <greg at grokking.org> wrote:

> Someone please correct me if I'm wrong on this but I
> believe rkhunter is 
> just checking the version 3.6.1 and doesn't account
> for the 'p1' part 
> which refers to a FBSD patch that corrected the
> vulnerability rkhunter 
> is referring to.
> 
> IOW, I don't think you need to update ssh on 5.2.1
> if your motive is 
> merely that rkhunter flagged it.

OK, that's a relief, thanks.

Same question holds, though. If some system software
is actually vulnerable, what's the procedure to update
it?

thanks

/wsbs



		
__________________________________ 
Do you Yahoo!? 
Read only the mail you want - Yahoo! Mail SpamGuard. 
http://promotions.yahoo.com/new_mail