AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
 View Only
  • 1.  OpenSSH multiple vulnerabilities, but ver 4.7 wants openssl...

    Posted Thu May 22, 2008 01:30 PM

    Originally posted by: SystemAdmin


    • AIX 5.3
    • Multiple AIX advisories issued on May 21, 2008 (received via email)
    .
    .

    F. AIX OpenSSH multiple vulnerabilities

    Downloaded new version of Openssh from:
    http://downloads.sourceforge.net/openssh-aix/openssh-4.7_5301.tar.Z

    HOWEVER,
    It won't install.. Gets the following:
    MISSING REQUISITES: The following filesets are required by one or more
    of the selected filesets listed above. They are not currently installed
    and could not be found on the installation media.

    openssl.base 0.9.8.600 # Fileset Update
    I have the following installed:
    lslpp -L openssl.base
    Fileset Level State Type Description (Uninstaller)
    <hr />
    openssl.base 0.9.8.4 C F Open Secure Socket Layer

    Why does IBM put this out but then it won't install???
    #AIX-Forum


  • 2.  Re: OpenSSH multiple vulnerabilities, but ver 4.7 wants openssl...

    Posted Thu May 22, 2008 01:48 PM

    Originally posted by: SystemAdmin


    I downloaded the latest version from that email but did not install it yet. I will watch this thread and see if anyone else has the problem you describe. Hopefully if an update is required to openssl, we'll be able to download it soon. -Mike
    #AIX-Forum


  • 3.  Re: OpenSSH multiple vulnerabilities, but ver 4.7 wants openssl...

    Posted Fri May 23, 2008 12:07 AM

    Originally posted by: SystemAdmin


    same problem here - looking for openssl.base 0.9.8.600.
    i've tried searching from fixes downloaded by suma - can't
    find it.

    i'm currently on:

    OpenSSH_4.5p1, OpenSSL 0.9.8d 28 Sep 2006
    5300-06-04-0748
    #AIX-Forum


  • 4.  Re: OpenSSH multiple vulnerabilities, but ver 4.7 wants openssl...

    Posted Fri May 23, 2008 10:28 AM

    Originally posted by: SystemAdmin


    The new openssl for AIX is available at IBM's AIX Web Download Pack Programs page.

    http://www-03.ibm.com/systems/p/os/aix/expansionpack/index.html

    Click on Downloads, then OpenSSL 0.9.8.4, which will take you to a page that has openssl.9.8.600.tar.Z (6476619).
    #AIX-Forum


  • 5.  Re: OpenSSH multiple vulnerabilities, but ver 4.7 wants openssl...

    Posted Fri May 23, 2008 01:23 PM

    Originally posted by: SystemAdmin


    Hi all,
    The new version of openssl V0.9.8.601, which is the prerequisite for the openssh v4.7 at AIX 5.2 is ready for download from the following site.

    https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp

    Anto
    #AIX-Forum