openssh

[Ravi_8]

Hi,

which is the latest ssh version for 11i and from where i can download it?
( i heard it's 3.7.1 and i couldn't found anywhere)

[Pete Randall]

Ravi,

HP offersA.03.61.001, based on OpenSSH 3.6p2

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

but you probably knew that already!


Pete

[Christian Gebhardt]

Hi

look at the same thread

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=239346


Chris

[Ravi_8]

Hi, pete

thanx for ur response.
I already have openssh 3.6.1 working.

our security valnurability scan report is showing some valnurability with 3.6.1 and recommendation is to apply 3.7.1, which i couldn't found anywhere. so thought of asking.

[Jerome Henry]

Hi Ravi,

ssh (open ssh) 3.7.1 is released, but not yet implemented specifically for your platform. You can try it here :
http://www.openssh.com/

hth

J

[Steven E. Protter · Accepted solution]

Ravi,

HP was able to fix the latest security problems in their 3.6 version.

That statement is backed up by HP's Berlene Herren.

You don't need the non-existant depot version of openssh 3.7 to be secure. Yet.

SEP

[Pratyush Paul_1]

The latest version of openssh is 3.7.p1 and it needs to be built across openssl 0.9.7c and zlib 1.1.4 Please do not use openssh version 3.6.x Anything below this version is simply compromising your security. I have a depotized version of openssh 3.7.p1 available with me for hpux 11.i Please let me know how I can get this to you. It had been compiled from source with the above versions of openssl and zlib. I have tested it and it is working fine. PHNE_27796 needs to be there in your system for openssh to work on hpux 11.i( the hostname lookup failed if this patch is missing)

Please let me know if you have any questions.

Thanks

Pratyush Paul

[GIRIJA SWAIN]

Pratyush,

Can you please let me know, what kind of vernerability is there in HP-UX SSH 3.61.002 ? We are thinking this is the latest. Can I ask you a compiled version of 3.7.1 ?
GSS

[Pratyush Paul_1]

Girija,

Any version below 3.7.p1 is a security risk. The flaw was buffer over run, with openssh 3.6.p1 & openssl 0.9.7b. Hence we have the only option of using openssh 3.7.p1, openssl 0.9.7c & zlib 1.1.4 It is working on my 11.i system. I have depotized it and it is ready for use. I have already tested the same from the depotized version. Please let me know if you need any additional support.

Thanks

Pratyush