From owner-freebsd-questions@FreeBSD.ORG Tue Sep 16 20:16:25 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B4BFE16A4B3 for ; Tue, 16 Sep 2003 20:16:25 -0700 (PDT) Received: from dragoncrest.jasnetworks.net (dragoncrest.jasnetworks.net [65.194.254.12]) by mx1.FreeBSD.org (Postfix) with ESMTP id 85B0643F93 for ; Tue, 16 Sep 2003 20:16:24 -0700 (PDT) (envelope-from dragoncrest@voyager.net) Received: from works.voyager.net (works.jasnetworks.net [192.168.0.2]) h8GMKkGb052958; Tue, 16 Sep 2003 22:20:47 GMT (envelope-from dragoncrest@voyager.net) Message-Id: <5.2.0.9.2.20030916232255.021e2250@pop.voyager.net> X-Sender: dragoncrest@pop.voyager.net X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9 Date: Tue, 16 Sep 2003 23:25:04 -0700 To: Lowell Gilbert , Johan Paul From: Dragoncrest In-Reply-To: <44u17cr0vj.fsf@be-well.ilk.org> References: <3F67392B.5010200@johanpaul.com> <3F67392B.5010200@johanpaul.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed cc: freebsd-questions@freebsd.org Subject: Re: Upgrading sshd? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 03:16:25 -0000 Silly question. Been trying to update my code today and all I can seem to update to is 3.6.1, yet I've seen other distros with 3.7.1p1 already. I think the openssh website also has 3.7.1p1 on it too. Obviously the ports tree has gotta catch up, but does anyone know when it will? For right now I can live with just shutting off access to ssh for now, but I'd like to upgrade to the 3.7.1p1 as soon as it's available for Freebsd. At 03:26 PM 9/16/03 -0400, Lowell Gilbert wrote: >Johan Paul writes: > > > Refering to the latest sshd vurnability > > (http://slashdot.org/articles/03/09/16/1327248.shtml?tid=126&tid=172) > > I was thinking of upgradeing my sshd as well. So I cvsup'ed my system > > (FBSD 4.8) and there seems to be a updated file for sshd. But how do I > > upgrade sshd safly since when I type 'pkg_info |grep ssh' it return no > > packages. I guess sshd is included somehow by the default install (??) > > but how can I now upgrade it? I was thinking of portupgrade, but it > > needs a package to upgrade... > >Right. openssh is part of the base system, and not normally installed >as a package. There is a security advisory newly out on the usual >FreeBSD mailing lists, and it gives instructions on fixing just this >one problem, but it's probably better to update the whole system when >you get a chance. [Note that this vulnerability does *not* give >attackers an opportunity to run their code on your system.] >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"