Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Oct 2001 21:14:28 -0400
From:      Zvezdan Petkovic <zvezdan@CS.WM.EDU>
To:        stable@FreeBSD.ORG
Subject:   Re: SSH Problem
Message-ID:  <20011002211428.B24931@dali.cs.wm.edu>
In-Reply-To: <200110030107.f9317Sk12340@ptavv.es.net>; from oberman@es.net on Tue, Oct 02, 2001 at 06:07:28PM -0700
References:  <20011002205800.A24931@dali.cs.wm.edu> <200110030107.f9317Sk12340@ptavv.es.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Oct 02, 2001 at 06:07:28PM -0700, Kevin Oberman wrote:
> > Date: Tue, 2 Oct 2001 20:58:00 -0400
> > From: Zvezdan Petkovic <zvezdan@CS.WM.EDU>
> > Sender: owner-freebsd-stable@FreeBSD.ORG
> > 
> > I do not understand why FreeBSD still distributes OpenSSH 2.3.x as
> > default and OpenSSH 2.9 as a port. As you can see it is already at 2.9.9
> > version. If you still use Protocol 1 you should be aware that your
> > system is _very_ vulnerable since there is a software that can sniff on
> > that version of SSH protocol. _RUN_ and update to Protocol 2 and
> > preferably the latest OpenSSH version. :-)
> 
> It does not distribute 2.3 with either stable or current. It was
> included (with security patches) in 4.4-release.
> 

I meant release, when I said default, because for people who install for
the first time from a 4.4 CD image that is the default. Of course, I
immediatelly went ahead and installed that 2.9 port. When I get some
time I'll update to 2.9.9 either directly from OpenBSD ftp site
adjusting my ports tree, or wait a little, perhaps the maintainer will
do that soon.

Cheers,
-- 
Zvezdan Petkovic <zvezdan@cs.wm.edu>
http://www.cs.wm.edu/~zvezdan/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011002211428.B24931>