AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only
  • 1.  What are the currently supported versions of openssh for AIX/VIOS?

    Posted 10 days ago

    Perhaps the term "supported" is foreign to the open source world.  I am taking it out of the context that supported is used in the following link:  https://www.ibm.com/support/pages/node/7236104 At that link I see "OpenSSH versions below 9.7 are out-of-support."

    Also, does that quote mean out-of-support for all versions of openSSH on AIX or does it mean that just version 9.x of openssh, and there are still supported versions of 8.x openssh?



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------


  • 2.  RE: What are the currently supported versions of openssh for AIX/VIOS?

    Posted 10 days ago

    The question of support with open source is always support by who exactly. In the case of MRS I think it means IBM but I don't work for them.

    Looking at the ifixes OpenSSH advisory16 was the last ifix that would fix the 8.1 version that is on the MRS site. That was in Feb of 2024. The latest openssh advisory is 19.

    A big part of the issue is OpenSSH 8.1 is built against OpenSSL 1.0.2 or 1.1.2 both of which are EOL.



    ------------------------------
    Alexander Pettitt
    ------------------------------



  • 3.  RE: What are the currently supported versions of openssh for AIX/VIOS?

    Posted 9 days ago

    I has been tested on my server website SCHNAP but i have problem with version openssh not supported, I use 8.1 right now. So how to fix it? because I have more product electrical right now



    ------------------------------
    SCHNAP Electrical Wholesaler
    SCHNAP Electrical Wholesaler
    NSW
    ------------------------------



  • 4.  RE: What are the currently supported versions of openssh for AIX/VIOS?

    Posted 9 days ago

    Not sure I understand the issue. But one guess is mismatch between OpenSSH and the OpenSSL library. 
    What does lslpp -l | grep -i open and oslevel -s output?



    ------------------------------
    Alexander Pettitt
    ------------------------------



  • 5.  RE: What are the currently supported versions of openssh for AIX/VIOS?

    Posted 9 days ago

    To me the statement IBM makes on the MRS download pages is that only 9.7 and 9.9 are currently supported (meaning fixes are provided for them).

    So, older versions of OpenSSH 9 do not receive support anymore, as well as any OpenSSH 8.* version (partially due to their dependance on OpenSSL 1).



    ------------------------------
    Richard Westerik
    Principal specialist
    Simac IT NL bv
    Ede
    +31651575123
    ------------------------------



  • 6.  RE: What are the currently supported versions of openssh for AIX/VIOS?

    Posted 2 days ago

    I think the above link, as well as many documents before that, quite clearly states that everything below Openssh 9.7.x is no longer supported. 
    However one still can download V8.x from IBM, but these are install filesets and will not receive any fixes (neither normal nor security relevant) . Openssh v8 and also v9.2 are compiled against lower versions of openssl than current and supported, so it might prove risky to use unsupported of these packages, as these sw packages are kind of "remote entry" to a system. 



    ------------------------------
    Martin Balaz
    ------------------------------



  • 7.  RE: What are the currently supported versions of openssh for AIX/VIOS?

    Posted 2 days ago

    @Alexander Pettitt 
    Just because you are asking -  commands output looks like this (depending on your OS level and installed SW Versions)
    "# oslevel -s"
    7300-03-00-2446

    "# lslpp -L | grep opens" 
     openssh.base.client  9.9.3015.1000    CE    F    Open Secure Shell Commands
     openssh.base.server  9.9.3015.1000    CE    F    Open Secure Shell Server
     openssh.license      9.9.3015.1000    C     F    Open Secure Shell License
     openssh.man.en_US    9.9.3015.1000    C     F    Open Secure Shell
     openssh.msg.de_DE    9.9.3015.1000    C     F    Open Secure Shell Messages
     openssh.msg.en_US    9.9.3015.1000    C     F    Open Secure Shell Messages
     openssl.base           3.0.15.1000    C     F    Open Secure Socket Layer
     openssl.license        3.0.15.1000    C     F    Open Secure Socket License
     openssl.man.en_US      3.0.15.1000    C     F    Open Secure Socket Layer
    rgds Martin 



    ------------------------------
    Martin Balaz
    ------------------------------