Kevin D. McAllister on Thu, 21 Mar 2002 17:08:43 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] ssh vs. ssh2


On or about Thu, Mar 21, 2002 at 04:24:32PM -0500, pinkee@cavegirl.org wrote:
> On Thu, Mar 21, 2002 at 02:28:44PM -0500, gabriel rosenkoetter wrote:
> > Considering there are security problems if a RH 6.2 box ever touches
> > a network, I'd upgrade to *something*.
> 
> I agree. I just wouldn't make it RH 7.x. That is me though and not
> looking for an arguement either :) 
>  

Actually as with most distributions RedHat does make an effort to make
patched versions of all of their software available.  I recently had
to install a 6.2 box to evaluate some software that recommends RedHat
6.2 as the host environment.  And I was concerned about updating it
given all of the vulnerabilities found since 6.2 hit the presses.

Those of you who use redhat 7.0 and later are no doubt familiar with
their up2date tool.  Well if I am not mistaken 6.2 didn't have such a
useful tool for keeping your installation updated.  However I found a
good, albeit high bandwidth, solution was to download all the RPMS in
the the os update directory (and powertools if necessary) and then use
the rpm Freshen option.  Freshen works like the -U upgrade option
except it only installs if the package will upgrade an already
existing software package, while -U will upgrade or install if it is
not already on the system.  

I had to install the rpm-4.0.2 and related packages from the upgrade
directory separately, and the openssl packages (as they were not
distributed with 6.2) but then I was able to run

'rpm -Fvh *.rpm'

to upgrade all relevant packages.  Of course I could be wrong and
up2date could work as it does on my 7.2 system, but I find that this
could be a better way to take care of your security concerns then
doing a full system upgrade or change.

______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug