Re: [cobalt-security] New SSH packages on pkg.cobalt.com

["Mel_Lester_Jr." <meljr@xxxxxxxxxxxx>]

I couldn't find this particular version of OpenSSH for the Qube3 at the
given URL, so I downloaded and built my own from source.  The only real
issue was that I also had to install OpenSSL, which went smoothly.

[root@apstest /tmp]# ssh -V
OpenSSH_3.0.2p1, SSH protocols 1.5/2.0, OpenSSL 0x0090602f

Thanks for the alert.

-mel

On Wed, 5 Dec 2001, pkg.nl.cobalt.com pkgmaster wrote:

> I have just uploaded the new version (3.0.2p1) of the OpenSSH packages for
> all Sun Cobalt appliances to http://pkg.cobalt.com
>
> Please install these versions as soon as possible if you have an earlier
> version installed already.
> It has come to my attention that OpenSSH < 3.0.2p1 might be vulnerable to
> remote exploits.
> I hereby want to thank Peter Batenburg from Proserve.nl for informing me
> about this matter.
> Please note this is not a Sun Cobalt issue, but all platforms are affected
> by this security issue with OpenSSH.
>
> With regards,
>
> Taco Scargo
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>