From owner-freebsd-questions@FreeBSD.ORG Sat Jun 14 21:12:51 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8449837B401 for ; Sat, 14 Jun 2003 21:12:51 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-64-169-104-32.dsl.lsan03.pacbell.net [64.169.104.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id E2F6943F3F for ; Sat, 14 Jun 2003 21:12:50 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5]) by obsecurity.dyndns.org (Postfix) with ESMTP id A684D66B9B; Sat, 14 Jun 2003 21:12:50 -0700 (PDT) Received: by rot13.obsecurity.org (Postfix, from userid 1000) id 74FA08B2; Sat, 14 Jun 2003 21:12:50 -0700 (PDT) Date: Sat, 14 Jun 2003 21:12:50 -0700 From: Kris Kennaway To: cp Message-ID: <20030615041250.GA7690@rot13.obsecurity.org> References: <000901c332ee$8d6c5c00$ad270343@compaq7058> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="VbJkn9YxBvnuCH5J" Content-Disposition: inline In-Reply-To: <000901c332ee$8d6c5c00$ad270343@compaq7058> User-Agent: Mutt/1.4.1i cc: freebsd-questions@freebsd.org Subject: Re: 4.0 Release vs ssh2/sshd2 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Jun 2003 04:12:51 -0000 --VbJkn9YxBvnuCH5J Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Jun 14, 2003 at 08:31:04PM -0700, cp wrote: > I almost feel guilty asking this because I think I know > the answer. We did a pkg_add of ssh2 from freebsd > and installed it but can't run getting an ld-elf error=20 > for an undefined symbol "__stdoutp".=20 >=20 > These two servers have 4.0 Release from March of > 2000. Is this release just way too old to be installing a port > dated May 2002? Yes. Packages are built against releases and against RELENG_4. > If so, should I use the old ssh off=20 > the 2000 cd (even though there are security problems) > rather than remain with open telnet/ftp we've used for=20 > years?=20 You could try compiling the port instead of using a prebuilt package, but you might be out of luck because you're running such an old release. On the other hand, if you're still running a stock 4.0-RELEASE system then you are vulnerable to other security problems anyway. Kris --VbJkn9YxBvnuCH5J Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE+6/JBWry0BWjoQKURAjGZAKDlMK+R7IlOi4crbFlvRq6P+S/J5wCfeYrX vDgpJNojV1In05QxEHbpP10= =NyWC -----END PGP SIGNATURE----- --VbJkn9YxBvnuCH5J--