I just noticed that YOU does not preselect the openssh patches although the openssh RPM is installed. If you rely on the preselection (which would be nice) this is dangerous because you won't get any openssh patches installed even though they are available. The reason for this behaviour seems to be the version of the RPM I have got on my 7.3 CD: openssh-2.9p2-39.i386.rpm The patches on the other hand have versions openssh-2.9.9p2-[38|74].i386.rpm ^^ !! so original RPM and patches do not match and yast does not preselect it. I think it would be nice if SuSE would point to this version mismatch in an upcoming security posting (apologies if there was one and I missed it). Thomas -- Thomas Werschlein, Interlace AG, CH-8005 Zurich werschlein@interlace.ch Tel +41 1 440 53 33 Fax +41 1 440 53 36 http://www.interlace.ch
I just noticed that YOU does not preselect the openssh patches although the openssh RPM is installed. If you rely on the preselection (which would be nice) this is dangerous because you won't get any openssh patches installed even though they are available.
The reason for this behaviour seems to be the version of the RPM I have got on my 7.3 CD: openssh-2.9p2-39.i386.rpm
The patches on the other hand have versions openssh-2.9.9p2-[38|74].i386.rpm ^^ !!
so original RPM and patches do not match and yast does not preselect it.
I think it would be nice if SuSE would point to this version mismatch in an upcoming security posting (apologies if there was one and I missed it).
Thomas
Can you please state the server that you were using with YOU? That server may have been out of sync. Currently, the default points at ftp.suse.com, which has the most recent packages. There was a minor problem with the patches description file, but it has been fixed a few weeks ago. Thanks, Roman. -- - - | Roman Drahtmüller <draht@suse.de> // "You don't need eyes to see, | SuSE GmbH - Security Phone: // you need vision!" | Nürnberg, Germany +49-911-740530 // Maxi Jazz, Faithless | - -
On Fri, 4 Jan 2002, Roman Drahtmueller wrote:
Can you please state the server that you were using with YOU? That server may have been out of sync. Currently, the default points at ftp.suse.com, which has the most recent packages. There was a minor problem with the patches description file, but it has been fixed a few weeks ago.
Oops, our local mirror (of sunsite.switch-cnlab.ch/...) was out of sync. I forgot to add the --delete flag to the mirror command of lftp (delete files not present at remote site). So the openssh-2.9.9p2-38.i386.rpm patch was still lying around. Suppose this was the problem. Sorry for the false alarm. Thanks a lot Thomas
participants (2)
-
Roman Drahtmueller -
Thomas Werschlein