updates openssh and others?

D

dragon2611

Verified User
Joined
Nov 26, 2004
Messages
73
i tryed to update openssh by building it via source as rk hunter saw it was vunrable


- OpenSSH 3.5p1 [ Vulnerable ]
- OpenSSH 3.9p1 [ OK ]


Now i have to open ssh help i want to get rid of the 3.5 and use the 3.9


also i cant seem to update openssl i tryed building the new one from source but it still rusn the old one.

also need to update gnu pg


can somebody tell me an easy way to update these? im quite new to linux managed to update proftpd from an rpm

but when i tryed that for the others i got an error saying it wouldnt work.
 
I don't know exactly what you did to update, so I can't tell you why things aren't working. I also don't know if installing from source puts everything in the same place as does using RPMs.

So I'm only going to address some generalities.

1) If you install from source you should remove RPMs first, but if you try you may find a lot of dependencies. If you force uninstalls in spite of dependencies you might find that source installs don't work with RPM dependencies and vice-versa, so forcing uninstalls in spite of dependencies could be dangerous; you should check various support forums and ask questions first.

2) To solve the dependency issue, the Red Hat RPM schema involves keeping the original numbering scheme, but adding a -x, where x can be a single or multi-digit number.

For example, if you were subscribed to Progeny Update Service you'd have been notified of a security update some time ago which had the same main version number as the vulnerable package but which is not vulnerable.

3) In general, to make life easier for us, we update RPM-installed packages from RPMs, and source-installed packages from source-installed updates.

Jeff
 
You must log in or register to reply here.
Back
Top