topic Re: openssh in Operating System - HP-UX

openssh

Ravi_8 — Mon, 27 Oct 2003 07:42:24 GMT

Hi,

which is the latest ssh version for 11i and from where i can download it?
( i heard it's 3.7.1 and i couldn't found anywhere)

Re: openssh

Pete Randall — Mon, 27 Oct 2003 07:46:53 GMT

Ravi,

HP offersA.03.61.001, based on OpenSSH 3.6p2

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

but you probably knew that already!

Pete

Re: openssh

Christian Gebhardt — Mon, 27 Oct 2003 07:57:35 GMT

Hi

look at the same thread

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=239346

Chris

Re: openssh

Ravi_8 — Mon, 27 Oct 2003 08:01:10 GMT

Hi, pete

thanx for ur response.
I already have openssh 3.6.1 working.

our security valnurability scan report is showing some valnurability with 3.6.1 and recommendation is to apply 3.7.1, which i couldn't found anywhere. so thought of asking.

Re: openssh

Jerome Henry — Mon, 27 Oct 2003 08:21:35 GMT

Hi Ravi,

ssh (open ssh) 3.7.1 is released, but not yet implemented specifically for your platform. You can try it here :
http://www.openssh.com/

hth

J

Re: openssh

Steven E. Protter — Mon, 27 Oct 2003 08:34:23 GMT

Ravi,

HP was able to fix the latest security problems in their 3.6 version.

That statement is backed up by HP's Berlene Herren.

You don't need the non-existant depot version of openssh 3.7 to be secure. Yet.

SEP

Re: openssh

Pratyush Paul_1 — Tue, 28 Oct 2003 09:23:09 GMT

The latest version of openssh is 3.7.p1 and it needs to be built across openssl 0.9.7c and zlib 1.1.4 Please do not use openssh version 3.6.x Anything below this version is simply compromising your security. I have a depotized version of openssh 3.7.p1 available with me for hpux 11.i Please let me know how I can get this to you. It had been compiled from source with the above versions of openssl and zlib. I have tested it and it is working fine. PHNE_27796 needs to be there in your system for openssh to work on hpux 11.i( the hostname lookup failed if this patch is missing)

Please let me know if you have any questions.

Thanks

Pratyush Paul

Re: openssh

GIRIJA SWAIN — Mon, 03 Nov 2003 02:04:54 GMT

Pratyush,

Can you please let me know, what kind of vernerability is there in HP-UX SSH 3.61.002 ? We are thinking this is the latest. Can I ask you a compiled version of 3.7.1 ?
GSS

Re: openssh

Pratyush Paul_1 — Mon, 03 Nov 2003 09:24:47 GMT

Girija,

Any version below 3.7.p1 is a security risk. The flaw was buffer over run, with openssh 3.6.p1 & openssl 0.9.7b. Hence we have the only option of using openssh 3.7.p1, openssl 0.9.7c & zlib 1.1.4 It is working on my 11.i system. I have depotized it and it is ready for use. I have already tested the same from the depotized version. Please let me know if you need any additional support.

Thanks

Pratyush