Are you sure the openssh was not patched? I am still running 2.9 on my x86 box and it was patched... if you look at the patches applied you will see that they fixed that. The 'standard' OpenSSH is subject to that in < 3.x revisions, but SuSE often patches existing things to get around security and functionality issues. On Wed, Mar 27, 2002 at 07:27:40PM +0100, frank mohr wrote:
--- suse-security
schrieb: Hi there ! I want to upgrade my Suse 7.3 box from OpenSSH_2.9p1 to OpenSSH_2.9p2 But after installing the Souse rpm with the appropriate Version. And ./configure i get the error : Could not find working OpenSSL libary .. How can i apply the patch.
simple solution - install OpenSSL - the openssl-0.9.6b that comes with SuSE 7.3 should work.
BTW: OpenSSH_2.9p2 is also affected by the "March 7, 2002: Off-by-one error in the channel code" - the most current version is 3.1p1
frank
__________________________________________________________________
Gesendet von Yahoo! Mail - http://mail.yahoo.de Ihre E-Mail noch individueller? - http://domains.yahoo.de
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
--
Jeff Graham