Jean-Pierre Radley typed (on Wed, Sep 24, 2003 at 01:21:24PM -0400):
| Jean-Pierre Radley typed (on Fri, Sep 19, 2003 at 07:37:41PM -0400):
| | There was a CERT alert regarding OpenSSH three days ago. I've prepared
| | a new archive of binaries for OSR 5.0.6; they will also function on OSR
| | 5.0.5. Get it from:
| |
| | ftp.jpr.com:/pub/openssh4osr5.tar.bz2
| |
| | >From the README:
| |
| | README for installing JPRadley's binaries for OSR 5.0.6
| | of prngd version 0.9.27 of Dec 20, 2002
| | and OpenSSH version 3.7.1p1 of Sep 16, 2003,
| | built using OpenSSL version 0.9.7b of Apr 10, 2003.
|
|
| There was yet another bug squashed in OpenSSH, so the tarballs on
| ftp.jpr.com have just been replaced, and now are based on
|
| OpenSSH version 3.7.1p2 of Sep 23, 2003


I have now prepared a tarball for OSR 5.0.7 as well:

ftp.jpr.com:/pub/openssh4osr507.tar.bz2

--
JP

In article <20030926023333.GB2949@jpradley.jpr.com>,
Jean-Pierre Radley <jpr@jpr.com> wrote:
>Jean-Pierre Radley typed (on Wed, Sep 24, 2003 at 01:21:24PM -0400):
>| Jean-Pierre Radley typed (on Fri, Sep 19, 2003 at 07:37:41PM -0400):
>| | There was a CERT alert regarding OpenSSH three days ago. I've prepared
>| | a new archive of binaries for OSR 5.0.6; they will also function on OSR
>| | 5.0.5. Get it from:
>| |
>| | ftp.jpr.com:/pub/openssh4osr5.tar.bz2
>| |
>| | >From the README:
>| |
>| | README for installing JPRadley's binaries for OSR 5.0.6
>| | of prngd version 0.9.27 of Dec 20, 2002
>| | and OpenSSH version 3.7.1p1 of Sep 16, 2003,
>| | built using OpenSSL version 0.9.7b of Apr 10, 2003.
>|
>|
>| There was yet another bug squashed in OpenSSH, so the tarballs on
>| ftp.jpr.com have just been replaced, and now are based on
>|
>| OpenSSH version 3.7.1p2 of Sep 23, 2003
>

>I have now prepared a tarball for OSR 5.0.7 as well:

> ftp.jpr.com:/pub/openssh4osr507.tar.bz2

And an FYI - if you have the 3.7.1p1 installed and you are not
going to be using PAM all you have to do is edit the
/etc/sshd.confi and put the line in UsePam no

The 1p2 patch just fixed that one point.

Bill

--
Bill Vermillion - bv @ wjv . com

Bill Vermillion typed (on Sat, Sep 27, 2003 at 01:38:21AM +0000):
| In article <20030926023333.GB2949@jpradley.jpr.com>,
| Jean-Pierre Radley <jpr@jpr.com> wrote:
| >Jean-Pierre Radley typed (on Wed, Sep 24, 2003 at 01:21:24PM -0400):
| >| Jean-Pierre Radley typed (on Fri, Sep 19, 2003 at 07:37:41PM -0400):
| >| | There was a CERT alert regarding OpenSSH three days ago. I've prepared
| >| | a new archive of binaries for OSR 5.0.6; they will also function on OSR
| >| | 5.0.5. Get it from:
| >| |
| >| | ftp.jpr.com:/pub/openssh4osr5.tar.bz2
| >| |
| >| | >From the README:
| >| |
| >| | README for installing JPRadley's binaries for OSR 5.0.6
| >| | of prngd version 0.9.27 of Dec 20, 2002
| >| | and OpenSSH version 3.7.1p1 of Sep 16, 2003,
| >| | built using OpenSSL version 0.9.7b of Apr 10, 2003.
| >|
| >|
| >| There was yet another bug squashed in OpenSSH, so the tarballs on
| >| ftp.jpr.com have just been replaced, and now are based on
| >|
| >| OpenSSH version 3.7.1p2 of Sep 23, 2003
| >
|
| >I have now prepared a tarball for OSR 5.0.7 as well:
|
| > ftp.jpr.com:/pub/openssh4osr507.tar.bz2
|
| And an FYI - if you have the 3.7.1p1 installed and you are not
| going to be using PAM all you have to do is edit the
| /etc/sshd.confi and put the line in UsePam no
|
| The 1p2 patch just fixed that one point.

Uh, Bill: the ChangeLog between Sep 16 and Sep 23 shows a score of other
little fixes.

| --
| Bill Vermillion - bv @ wjv . com

--
JP

In article <20030927151557.GA1881@jpradley.jpr.com>,
Jean-Pierre Radley <jpr@jpr.com> wrote:
>Bill Vermillion typed (on Sat, Sep 27, 2003 at 01:38:21AM +0000):
>| In article <20030926023333.GB2949@jpradley.jpr.com>,
>| Jean-Pierre Radley <jpr@jpr.com> wrote:
>| >Jean-Pierre Radley typed (on Wed, Sep 24, 2003 at 01:21:24PM -0400):
>| >| Jean-Pierre Radley typed (on Fri, Sep 19, 2003 at 07:37:41PM -0400):
>| >| | There was a CERT alert regarding OpenSSH three days ago. I've prepared
>| >| | a new archive of binaries for OSR 5.0.6; they will also function on OSR
>| >| | 5.0.5. Get it from:
>| >| |
>| >| | ftp.jpr.com:/pub/openssh4osr5.tar.bz2
>| >| |
>| >| | >From the README:
>| >| |
>| >| | README for installing JPRadley's binaries for OSR 5.0.6
>| >| | of prngd version 0.9.27 of Dec 20, 2002
>| >| | and OpenSSH version 3.7.1p1 of Sep 16, 2003,
>| >| | built using OpenSSL version 0.9.7b of Apr 10, 2003.
>| >|
>| >|
>| >| There was yet another bug squashed in OpenSSH, so the tarballs on
>| >| ftp.jpr.com have just been replaced, and now are based on
>| >|
>| >| OpenSSH version 3.7.1p2 of Sep 23, 2003
>| >
>|
>| >I have now prepared a tarball for OSR 5.0.7 as well:
>|
>| > ftp.jpr.com:/pub/openssh4osr507.tar.bz2

>| And an FYI - if you have the 3.7.1p1 installed and you are not
>| going to be using PAM all you have to do is edit the
>| /etc/sshd.confi and put the line in UsePam no

>| The 1p2 patch just fixed that one point.

>Uh, Bill: the ChangeLog between Sep 16 and Sep 23 shows a score
>of other little fixes.

Hm. I replied in email and didn't realize you had posted.

The by adding that one line to the config you close the security
hole in 1p1. That is documented on the openssh.org site. So
doing that will get rid of the hole until some can DL and install
a new version.

Bill


--
Bill Vermillion - bv @ wjv . com

Jean-Pierre Radley <jpr@jpr.com> wrote in message news:<20030926023333.GB2949@jpradley.jpr.com>...
> Jean-Pierre Radley typed (on Wed, Sep 24, 2003 at 01:21:24PM -0400):
> | Jean-Pierre Radley typed (on Fri, Sep 19, 2003 at 07:37:41PM -0400):
> | | There was a CERT alert regarding OpenSSH three days ago. I've prepared
> | | a new archive of binaries for OSR 5.0.6; they will also function on OSR
> | | 5.0.5. Get it from:
> | |
> | | ftp.jpr.com:/pub/openssh4osr5.tar.bz2
> | |
> | | >From the README:
> | |
> | | README for installing JPRadley's binaries for OSR 5.0.6
> | | of prngd version 0.9.27 of Dec 20, 2002
> | | and OpenSSH version 3.7.1p1 of Sep 16, 2003,
> | | built using OpenSSL version 0.9.7b of Apr 10, 2003.
> |
> |
> | There was yet another bug squashed in OpenSSH, so the tarballs on
> | ftp.jpr.com have just been replaced, and now are based on
> |
> | OpenSSH version 3.7.1p2 of Sep 23, 2003
>
>
> I have now prepared a tarball for OSR 5.0.7 as well:
>
> ftp.jpr.com:/pub/openssh4osr507.tar.bz2

I looked around your FTP site and didn't see any UW7.x packages, nor
have I looked on SCO's site. Will the OSR5 507 compiled OpenSSH run
on UW 7.x?

Jack Moe

Jack Moe typed (on Wed, Oct 01, 2003 at 01:18:01PM -0700):
| Jean-Pierre Radley <jpr@jpr.com> wrote in message news:<20030926023333.GB2949@jpradley.jpr.com>...
| >
| > I have now prepared a tarball for OSR 5.0.7 as well:
| >
| > ftp.jpr.com:/pub/openssh4osr507.tar.bz2
|
| I looked around your FTP site and didn't see any UW7.x packages, nor
| have I looked on SCO's site. Will the OSR5 507 compiled OpenSSH run
| on UW 7.x?

Had I used the UDK compiler, it would have; but I didn't, I used gcc.
If I have a minute, I'll try to re-compile with the UDK compiler.


--
JP

Jack Moe wrote:
>
>
> I looked around your FTP site and didn't see any UW7.x packages, nor
> have I looked on SCO's site. Will the OSR5 507 compiled OpenSSH run
> on UW 7.x?
>

I compiled and installed OpenSSH 3.7.1p2 (on OpenUNIX8 (akas UnixWare
7.1.2); I think it should work for OU8 and UnixWare 7.1.3.

Not sure abour previous version of UnixWare7.

However, if you wanna give it a run, drop an email and I'll get the
package to you.

--
Best,
Roberto
--
Roberto Zini - Technical Support Manager - email:r.zini<AT>strhold.it
Technical Support Manager -- Strhold Evolution Division R.E. (ITALY)
---------------------------------------------------------------------
"Has anybody around here seen an aircraft carrier?"
(Pete "Maverick" Mitchell - Top Gun)

Jean-Pierre Radley <jpr@jpr.com> wrote in message news:<20031001213841.GI24405@jpradley.jpr.com>...
> Jack Moe typed (on Wed, Oct 01, 2003 at 01:18:01PM -0700):
> | Jean-Pierre Radley <jpr@jpr.com> wrote in message news:<20030926023333.GB2949@jpradley.jpr.com>...
> | >
> | > I have now prepared a tarball for OSR 5.0.7 as well:
> | >
> | > ftp.jpr.com:/pub/openssh4osr507.tar.bz2
> |
> | I looked around your FTP site and didn't see any UW7.x packages, nor
> | have I looked on SCO's site. Will the OSR5 507 compiled OpenSSH run
> | on UW 7.x?
>
> Had I used the UDK compiler, it would have; but I didn't, I used gcc.
> If I have a minute, I'll try to re-compile with the UDK compiler.

That would be most appreciated. Thank you!

Jack Moe