topic Re: SSH download problem and vunerability in Operating System - HP-UX

SSH download problem and vunerability

Stefan Farrelly — Wed, 27 Nov 2002 10:31:55 GMT

Hi all,

can anyone else please confirm a problem downloading the new version of HP's secure shell from software.hp.com. When you get to the slection/ordering page it says;

product name: HP-UX Secure Shell
product #: T1471AA
version: A.03.10.003

But when you next move onto the download page with the ftp link it only points to version A.3.10.002 and if you download it is version .002, not .003.

I need the latest version because we received an advisory today about the SSH version HP are using (based on openssh 3.1p1) and need to upgrade asap to the latest version. Im hoping HP's version .003 uses a late enough version of openssh to fix the problem (3.1.5 or 3.2.2).

Re: SSH download problem and vunerability

U.SivaKumar_2 — Wed, 27 Nov 2002 10:39:29 GMT

Hi,

Have you installed that downloaded one and checked the version by running the executable

regards,
U.SivaKumar

Re: SSH download problem and vunerability

Steve Steel — Wed, 27 Nov 2002 10:45:36 GMT

Hi

HP-UX Secure Shell A.03.10.002 is for HP-UX 11.00 and 11i
HP-UX Secure Shell A.03.10.003 is for HP-UX 11i version 1.6

Steve Steel

Re: SSH download problem and vunerability

Stefan Farrelly — Wed, 27 Nov 2002 11:07:24 GMT

Steve,

the selection page does let me select 3.10.003 for HP-UX 11.0 and when it gots to the download page 3.10.002 is listed - so even if .003 is for 11i it still lets me select for 11.0 without an error - so there is still a problem on the HP site.

Re: SSH download problem and vunerability

Wodisch — Thu, 28 Nov 2002 18:59:12 GMT

Hi,

since HP's SSH is their compilation the OpenSSH anyway, how about using the original OpenSSH - it is version 3.5p1 already...
And they *support* HP-UX with their "portable" flavour of it.

FWIW,
Wodisch