Jean-Pierre Radley typed (on Fri, Sep 19, 2003 at 07:37:41PM -0400):
| There was a CERT alert regarding OpenSSH three days ago. I've prepared
| a new archive of binaries for OSR 5.0.6; they will also function on OSR
| 5.0.5. Get it from:
|
| ftp.jpr.com:/pub/openssh4osr5.tar.bz2
|
| >From the README:
|
| README for installing JPRadley's binaries for OSR 5.0.6
| of prngd version 0.9.27 of Dec 20, 2002
| and OpenSSH version 3.7.1p1 of Sep 16, 2003,
| built using OpenSSL version 0.9.7b of Apr 10, 2003.


There was yet another bug squashed in OpenSSH, so the tarballs on
ftp.jpr.com have just been replaced, and now are based on

OpenSSH version 3.7.1p2 of Sep 23, 2003

--
JP

The roller coaster hasn't stopped yet. Two releases of OpenSSH in the
last fortnight, and yesterday, a new release of OpenSSL upon which
OpenSSH relies.

So now the OSR 5 binaries on ftp.jpr.com/pub are new as of Oct 1st.

Choose either of the following for OSR 5.0.6 (will also run on 5.0.5;
untested on anything earlier release of OSR 5):

openssh4osr5.tar.bz2
openssh4osr5.tgz

This package is only for OSR 5.0.7:

openssh4osr507.tar.bz2

The README for all of them starts out:

README for installing JPRadley's binaries for OSR 5.0.x
of prngd version 0.9.27 of Dec 20, 2002
and OpenSSH version 3.7.1p2 of Sep 23, 2003,
built using OpenSSL version 0.9.7c of Sep 30, 2003.

--
JP