Re: need to update the following after security audit

[Avtar Gill <avtargill gmail com>]

Leuy Eeelyu wrote:

> Besides, I used the following command and know that
> openssh-3.6.1p2-33.30.1 was last updated on 04 Mar
> 2004. But what does it means to them?
>
> [root box root]# rpm --query --changelog
> openssh-3.6.1p2-33.30.1 | more
> * Thu Mar 04 2004 Phil Knirsch <pknirsch redhat com>
> 3.6.1p2-33.30.1
>
> - Built RHLE3 U2 update package.

I believe you have an older version of that package installed.  The 
latest one for RHEL3 is openssh-3.6.1p2-33.30.3

$ rpm -q --changelog openssh-3.6.1p2-33.30.3 | more
* Mon Oct 04 2004 Nalin Dahyabhai <nalin redhat com> 3.6.1p2-33.30.3

- add a --enable-vendor-patchlevel option which allows a ShowPatchLevel 
option
  to enable display of a vendor patch level during version exchange 
(#120285)
- configure with --disable-strip to build useful debuginfo subpackages

* Mon Sep 27 2004 Nalin Dahyabhai <nalin redhat com>

- backport fix from 3.7 to use TCP_NODELAY for interactive connections again

[snip]