OpenSSH - CVE-2006-5051/2

[Woodchuck]

On Wed, 4 Oct 2006, Peter Hessler wrote:

> The version of OpenSSH in OpenBSD gets patched quite quickly,
> including on the -stable branches.  update and you should be
> protected.  

This is one of those times when OpenBSD shines.  The 4.4 stuff has
been in the CVS archive for -stable for a couple days now; I updated
on the 2 and am at 4.4 now.

Compare with NetBSD -- the current version there is 3.9.

A lot of the files in OpenSSH were changed as part of the upgrade,
it is better to update the whole thing (with cvs, say) rather than
do patching, IMHO.  I'm assuming that MK has a source tree that he
keeps updated.  I don't see any patches for OpenSSH at the OpenBSD
website.

this ought to work  (it seemed to just work for me, anyway)

cd /usr/src/usr.bin/ssh  
# the cvs command assumes that CVSROOT is already set
cvs up -r OPENBSD_3_9 -Pd
make
make install

Dave
> 

> On Mon, 2 Oct 2006 22:02:57 +0200
> "MK" <public at kubikcz.net> wrote:
> 
> : Hallo
> : 
> : Does somebody know if the patch for last issues in OpenSSH will be released 
> : or is it better to compile version 4.4?
> : 
> : Thanks a lot
> : MK 
> : 
> : _______________________________________________
> : Openbsd-newbies mailing list
> : Openbsd-newbies at sfobug.org
> : http://mailman.theapt.org/listinfo/openbsd-newbies
> : 
> 
> 
> -- 
> Murphy's Law of Research:
> 	Enough research will tend to support your theory.
> _______________________________________________
> Openbsd-newbies mailing list
> Openbsd-newbies at sfobug.org
> http://mailman.theapt.org/listinfo/openbsd-newbies
> 

-- 
       Of a truth, few men desire freedom, the greater part
           are content with just masters. --  Sallust