The FreeBSD Diary

The FreeBSD Diary (TM)

Providing practical examples since 1998

If you buy from Amazon USA, please support us by using this link.
[ HOME | TOPICS | INDEX | WEB RESOURCES | BOOKS | CONTRIBUTE | SEARCH | FEEDBACK | FAQ | FORUMS ]
Scripts / handy tips
 New Topic  |  Go to Top  |  Go to Topic  |  Search  |  Log In   Newer Topic  |  Older Topic 
 Upgrade to OpenSSH 3.3 howto
Author: Johannes 
Date:   26-06-02 14:55

Hi,

We all should by now be aware of the upcoming exploit in OpenSSH. Version 3.3 introduces Private Seperation, which should make the issue non-exploitable. Because of the lack of information regarding FreeBSD and OpenSSH upgrading (no mail from the FreeBSD security officer, nor patches), I wrote a little howto. It worked for me, and reports from others are positive.

I hope it'll contribute to the deployment of OpenSSH 3.3 on FreeBSD. Comments are welcome.

http://www.trunix.com/freebsd-4.x_openssh-3.3_upgrade.html

Reply To This Message
 
 Re: Upgrade to OpenSSH 3.3 howto
Author: k 
Date:   27-06-02 06:11

I installed the port a few hours ago and it did download the patch
from OpenBSD's FTP site. I diffed auth2-chall.c with the one posted
on OpenSSH's website and they were the same. YMMV.

Reply To This Message
 
 Re: Upgrade to OpenSSH 3.3 howto
Author: Dan Langille 
Date:   27-06-02 22:56

http://www.openssh.org/txt/preauth.adv says to upgrade to 4.4.

Reply To This Message
 
 Re: Upgrade to OpenSSH 3.3 howto
Author: Dan Langille 
Date:   27-06-02 23:00

"installing bind8 from ports" (http://www.freebsddiary.org/bind8-from-ports.php) shows how to install bind8 from the ports tree and have it replace the existing base version. The same technique may be applicable to openshh.

Reply To This Message
 Forum List  |  Threaded View   Newer Topic  |  Older Topic 


 Forum List  |  Need a Login? Register Here 
 User Login
 User Name:
 Password:
 Remember my login:
   
 Forgot Your Password?
Enter your email address or user name below and a new password will be sent to the email address associated with your profile.
How to get the most out of the forum

phorum.org