4.0 Release vs ssh2/sshd2

Kris Kennaway kris at obsecurity.org
Sat Jun 14 21:12:51 PDT 2003


On Sat, Jun 14, 2003 at 08:31:04PM -0700, cp wrote:
> I almost feel guilty asking this because I think I know
> the answer. We did a pkg_add of ssh2 from freebsd
> and installed it but can't run getting an ld-elf error 
> for an undefined symbol "__stdoutp". 
> 
> These two servers have 4.0 Release from March of
> 2000. Is this release just way too old to be installing a port
> dated May 2002?

Yes.  Packages are built against releases and against RELENG_4.

> If so, should I use the old ssh off 
> the 2000 cd (even though there are security problems)
> rather than remain with open telnet/ftp we've used for 
> years? 

You could try compiling the port instead of using a prebuilt package,
but you might be out of luck because you're running such an old
release.

On the other hand, if you're still running a stock 4.0-RELEASE system
then you are vulnerable to other security problems anyway.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030614/69efaefe/attachment.bin


More information about the freebsd-questions mailing list