[cobalt-security] [cobalt-users] Important: SSH2 update

[Peter Batenburg <peter@xxxxxxxxxx>]

Hello,

I suggest everyone that has downloaded the openssh pkg from 
pkg.nl.cobalt.com to do the following:
ftp ftp.ssh.com
cd /pub/ssh/rpms
get ssh-2.4.0-1nox.i386.rpm
bye

rpm -i ssh-2.4.0-1nox.i386.rpm

/etc/rc.d/init.d/sshd stop
rm /usr/bin/ssh
ln -s /usr/local/bin/ssh /usr/bin/ssh
rm /usr/sbin/sshd
ln -s /usr/local/sbin/sshd /usr/sbin/sshd
rm /usr/bin/ssh-add
ln -s /usr/local/bin/ssh-add /usr/bin/ssh-add
rm /usr/bin/ssh-agent
ln -s /usr/local/bin/ssh-agent /usr/bin/ssh-agent
rm /usr/bin/ssh-keygen
ln -s /usr/local/bin/ssh-keygen /usr/bin/ssh-keygen

/etc/rc.d/init.d/sshd2 start

(all as root)

your now updated. ;)
this update automaticly removes all ssh1 utils.
next week im planning to make a .pkg for raq3/4 to do this update.
here are some links to ssh2 clients:
* Putty : http://www.chiark.greenend.org.uk/~sgtatham/putty/
* SecureCRT : http://www.vandyke.com/products/securecrt/index.html
* SecureFX : http://www.vandyke.com/products/securefx/index.html

* SSH statement regarding the vulnerability of SSH1 protocol : 
http://www.ssh.com/products/ssh/cert/


** any updates or corrections are welcome **


_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users