[MLUG] Openssh vulnerability

["Russell Horn" <EMAIL:PROTECTED>]

Sorry to distract from the Vulcan ancestry messages over on the
discussion list.

In case anyone didn't notice, an openssh vulnerability has been
discovered and patches made available.

1. Versions affected:

        All versions of OpenSSH's sshd prior to 3.7 contain a buffer
        management error.  It is uncertain whether this error is
        potentially exploitable, however, we prefer to see bugs
        fixed proactively.

2. Solution:

	Upgrade to OpenSSH 3.7 or use the source patch at
http://www.openssh.com/txt/buffer.adv

Links to the backported RPMs for RedHat and SuSE are linked below. For
Debian use apt-get to update your system.

For RedHat go here

https://rhn.redhat.com/errata/RHSA-2003-279.html

For SuSE here are the RPMs.

    SuSE-8.2:
 
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/openssh-3.5p1-106.i
586.rpm
      492d66deaedcfc20c1f0d66e508db790

    SuSE-8.1:
 
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/openssh-3.4p1-214.i
586.rpm
      dda7728501c8cf17c60eff1862922842

    SuSE-8.0:
 
ftp://ftp.suse.com/pub/suse/i386/update/8.0/sec1/openssh-3.4p1-214.i386.
rpm
      2361dccd5b0c83178f8d0d5988b3490e

    SuSE-7.3:
 
ftp://ftp.suse.com/pub/suse/i386/update/7.3/sec1/openssh-2.9.9p2-155.i38
6.rpm
      1418135ed33e59d1ce37ea135617b5bc

    SuSE-7.2:
 
ftp://ftp.suse.com/pub/suse/i386/update/7.2/sec1/openssh-2.9.9p2-155.i38
6.rpm
      e807ecd9c4d167e3ef3764c06af1a511

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members