RE: [cobalt-security] OpenSSH-3.7p1 PKGs released

["Michele Neylon:: Blacknight Solutions" <michele@xxxxxxxxxxxxxxxxxxxxxxx>]

Try installing from the command line. If that fails uninstall via the
command line and then install the new version.
NB: The default settings in OpenSSH on RAQs are a little promiscuous. You
might want to tighten them up a bit

Mr. Michele Neylon
Blacknight Solutions
http://www.blacknightsolutions.ie/
Probably the cheapest ie's in Ireland
Tel. +353 (0)59 9139897
Fax. +353 (0)59 9139897 

> -----Original Message-----
> From: cobalt-security-admin@xxxxxxxxxxxxxxx 
> [mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of John Mehan
> Sent: 17 September 2003 21:14
> To: cobalt-security@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-security] OpenSSH-3.7p1 PKGs released
> 
> Hi all,
> 
> I have Solarspeeds OpenSSH Release 3.4p1-3 installed. When I 
> try to install this new version it asks me if I want to 
> overwrite and then fails to install.  Anyone else have this 
> problem?  Should I uninstall the old version? How would I go 
> about uninstalling the old version?
> 
> Thanks in advance,
> 
> John
> --- Michael Stauber <cobalt@xxxxxxxxxxxxxx> wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > Hi all,
> > 
> > A vulnerability has been reported in OpenSSH that is rumoured to be 
> > remotely exploitable for root privileges, even in the face 
> of privsep. 
> > As a result
> > OpenSSH-3.7 was released today.
> > 
> > I have rolled up OpenSSH-3.7p1 PKGs for the RaQ3, RaQ4, XTR, RaQ550,
> > Qube3 and
> > Sun Cobalt Control Station which are available here:
> > 
> > Main download page:
> > =================
> > http://www.solarspeed.net/downloads/index.php
> > 
> > 
> > RaQ3 & RaQ4:
> > =================
> > http://ns2.solarspeed.net/downloads/RaQ3-RaQ4-OpenSSH-3.7p1-1.pkg
> > md5sum: d26875f1b52e84aac83f173b27f98e6b
> > 
> > RaQ550:
> > ========
> > http://ns2.solarspeed.net/downloads/RaQ550-SSH-3.7p1-1.pkg
> > md5sum: a602d063bb37fc09891a24a318320697
> > 
> > Qube3, XTR, Sun Cobalt Control Station:
> > =================================
> > http://ns2.solarspeed.net/downloads/Qube3-XTR-SSH-3.7p1-1.pkg
> > md5sum: 52a7ca27eef3a043ab9406c070f5ef3b
> > 
> > 
> > As usual these PKGs are supplied without warranty or support of any 
> > kind.
> > 
> > - --
> > 
> > With best regards,
> > 
> > Michael Stauber
> > Solarspeed.net
> > 
> > Public PGP Key: https://www.solarspeed.net/mstauber.asc
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)
> > 
> > iD8DBQE/Z30yEcjLwmf9gR4RAsiLAJ9vzcXdUoTh7HnS9avbbuqJfKAdiwCgzxtU
> > qWWm8ZxrZEBj8F/QwUb1aQs=
> > =8YII
> > -----END PGP SIGNATURE-----
> > 
> > 
> > _______________________________________________
> > cobalt-security mailing list
> > cobalt-security@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-security
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
> 
> 


#########################################################
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance to it is prohibited.