Re: Rebuilding OpenSSH on RedHat 7.3

From: Nico Kadel-Garcia (nkadel_at_comcast.net)
Date: 03/12/04 

Date: Fri, 12 Mar 2004 08:48:27 -0500

Grant wrote:
> Thanks for the suggestion Bob, I went to check out the SRPMS. Alas -
> the version of OpenSSH (3.5p1) included in the RH 9.0 SRPMS is
> vulnerable :(. Versions up to 3.7.1p2 are. It is a very minor
> vulnerability but I'd like to see to it that its taken care of :)
>
> thanks again

Irrelevant, as well as the vulnerabilities in the published OpenSSH SRPM's
for 7.3. RedHat has very cautiously, and very reasonably, backported
security patches to the older versions of OpenSSL and OpenSSH in RedHat 7.3.
The "update" RPM's and SRPM's for 7.3 certainly have all the patches as of
last December.

If you need to continue supporting a RedHat release on older hardware
incapable of handling the somewhat larger RAM and CPU loads of Fedora,
you'll need to be prepared to backport security patches or learn to rebuild
SRPM's as needed. But your time may be better spent upgrading to Fedora: I'm
running it handily on a number of 400 MHz machines, and have certainly run
it on a 300 MHz laptop without too much difficulty.

Relevant Pages