Re: [cobalt-security] OpenSSH-3.7p1 PKGs released

[John Mehan <jmehan@xxxxxxxxx>]

Hi all,

I have Solarspeeds OpenSSH Release 3.4p1-3 installed. When I try to
install this new version it asks me if I want to overwrite and then
fails to install.  Anyone else have this problem?  Should I uninstall
the old version? How would I go about uninstalling the old version?

Thanks in advance,

John 
--- Michael Stauber <cobalt@xxxxxxxxxxxxxx> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi all,
> 
> A vulnerability has been reported in OpenSSH that is rumoured to be
> remotely
> exploitable for root privileges, even in the face of privsep. As a
> result
> OpenSSH-3.7 was released today.
> 
> I have rolled up OpenSSH-3.7p1 PKGs for the RaQ3, RaQ4, XTR, RaQ550,
> Qube3 and
> Sun Cobalt Control Station which are available here:
> 
> Main download page:
> =================
> http://www.solarspeed.net/downloads/index.php
> 
> 
> RaQ3 & RaQ4:
> =================
> http://ns2.solarspeed.net/downloads/RaQ3-RaQ4-OpenSSH-3.7p1-1.pkg
> md5sum: d26875f1b52e84aac83f173b27f98e6b
> 
> RaQ550:
> ========
> http://ns2.solarspeed.net/downloads/RaQ550-SSH-3.7p1-1.pkg
> md5sum: a602d063bb37fc09891a24a318320697
> 
> Qube3, XTR, Sun Cobalt Control Station:
> =================================
> http://ns2.solarspeed.net/downloads/Qube3-XTR-SSH-3.7p1-1.pkg
> md5sum: 52a7ca27eef3a043ab9406c070f5ef3b
> 
> 
> As usual these PKGs are supplied without warranty or support of any
> kind.
> 
> - --
> 
> With best regards,
> 
> Michael Stauber
> Solarspeed.net
> 
> Public PGP Key: https://www.solarspeed.net/mstauber.asc
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
> 
> iD8DBQE/Z30yEcjLwmf9gR4RAsiLAJ9vzcXdUoTh7HnS9avbbuqJfKAdiwCgzxtU
> qWWm8ZxrZEBj8F/QwUb1aQs=
> =8YII
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security