OpenSSH 3.7

[Pete G]

TruSecure has informed me that I need OpenSSH version 3.7 or higher due to an exploit in the current version I am running found the other day. I do not see a new depot file on software.hp.com for this package. Anyone have any idea if it has been released yet and if so where I may obtain it?

[Steven E. Protter · Accepted solution]

HP's current version of Secure Shell openssh is 3.6

HP is looking into exploit reports right now. They might have caught the problem in their port, which would make the current version safe.

If this is a serious problem, HP will probably get 3.7 out quickly.

Until then, you'll have to download and compile the portable version from http://www.openssh.org

SEP

[Kevin O'Donovan]

Hi,

check out http://www.openssh.org, in particular the http://www.openssh.org/portable.html page.

I haven't done this or used OpenSSH at all but it does have 3.7 in there.

hope that helps,
Kevin.

[Pete G]

Thanks but I want the "depot" file from HP. I already knew I could obtain tarballs from OpenSSH's site.

Reagrds...

[Jeff Schussele]

Hi Peter,

HP rarely rushes these pkgs out the door.
If you need it ASAP, then you have no choice but to retrieve the source from openssh.org & compile it yourself.
That's what we do normally.

Rgds,
Jeff