Upgrade Open SSh

[haynesdavis]

Hello,

I would like to upgrade my openssh. But I am not sure as to how much safe it is. Please could you guys advice me on this and make me do it. I am using a linux system with the architecture i686.


Thanks in advance


Regards,
Haynes

[dave9000]

There are several methods of updating the software depending on what OS your running and if you need any custom options.

If your running CentOS,FC or whitebox linux then its simple

ssh into server

yum update openssl

thats all there is to it

if your on RHEL then up2date openssl

freeBSD your on your own with that one

[sh4ka]

According to chirpy's suggestion we shall not update ssh..
http://forums.cpanel.net/showthread....&highlight=ssh

Anyway, i want to have other suggestions if possible.. ?? I'mk using RHES 3 and 4.

thkz!

[dave9000]

you need to reread chirpys suggestion

it does not say not to update it

it says the version number will not be current because they backport fixes into the old version

as I said above use up2date and you will get the backported updated version

[sh4ka]

yap, you are right..

dave, what would be the exact command to upgrade sshd on RedHat Enterprise 3 and 4?

I readed this guide from eth0's website: http://www.eth0.us/sshd .. is your upgrade method the same as he explain in that article ?

thkz

[AndyReed]

I would like to upgrade my openssh. But I am not sure as to how much safe it is. Please could you guys advice me on this and make me do it. I am using a linux system with the architecture i686.

The question is, why do you need to upgrade openSSH? Unless you experience vulnerabilities, or have v3.4 or earlier.

[dave9000]

On RHEL3,4 all you have to do is run up2date -u -v to update all packages that need to be updated with the exception of the packages listed in the exclude list and a cpanel upcp will keep those updated.

one exception to the above rules is the kernel

to update the kernel you do this

up2date --nox -f kernel or kernel-smp depending on if you have mutli processors or not

This will not update any packages compiled from source that RHEL or cpanel did not install