Re: lug-bg: OpenSSH vulnerable

[vlk@xxxxxxxxxxxxxxxxx (Vesselin Kolev)]

Mandrake LINUX pusnaha updates oshte snoshti. Mozhete da gi 
izteglite ot niakoi ot mirrorite, no az lichno predpochitam tozi

ftp://ftp-linux.cc.gatech.edu/

Napravo davam linkovete kym up2dates:

Mandrake 8.1:

ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.1/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.1/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.1/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.1/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.1/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm

Mandrake 8.2

ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.2/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.2/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.2/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.2/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://ftp-linux.cc.gatech.edu/pub/linux/distributions/mandrake/updates/8.2/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm

Predi update na paketite se spira sshd:

/etc/rc.d/init.d/sshd stop

Vsichko se sybira v edna directoria i posle kato root se izpylniava:

rpm -Fhv openssh-*

Posle se redkatira /etc/ssh/sshd_config i se pribavia

UsePrivilegeSeparation yes

i nakraia otnovo se puska sshd:

/etc/rc.d/init.d/sshd start

  Mislia, che tezi updates traibva da rabotiat i na drugi RPM bazirani
distribucii.. naprimer RedHat. V interes na istinata niama oshte update
ot RedHat za SSHD.

  Pozdravi
      Vesselin

On Tuesday 25 June 2002 10:08, you wrote:
> Informaciq za Debian GNU/Linux:
> http://www.debian.org/security/2002/dsa-134
>
> Na kratko: nqma wse oshte update za potato
> Za woody publikuwan weche workaround. apt userite mogat da dobawqt
> sledniq red w 
/etc/apt/sources.list
> #
> deb http://security.debian.org/ woody/updates main contrib non-free
> #
> posle
> apt-get update
> apt-get dist-upgrade
>
> BR,
> Boyan
>
> -----Original Message-----
> From: Dancho Mitev [mailto:dan@xxxxxxxxxxxxx]
> Sent: Tuesday, June 25, 2002 8:55 AM
> To: lug-bg@xxxxxxxxxxxxxxxxxx
> Subject: lug-bg: OpenSSH vulnerable
>
>
> http://www.linuxsecurity.com/articles/cryptography_article-5185.html
>
>
>
>
>
> ______________________________________
> Scanned and protected by Inflex
> Inflex Scanning software Available at
> http://pldaniels.com/inflex
> ===========================================================================
>= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
> http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
> Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
> ===========================================================================
>=
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================