freebsd security - Sep 2004 - openssh version

On Wed, 2 Jan 2002, John Hay wrote:
> Well I can accept your argument for -stable, although bigger changes has
> gone in -stable in the past, but what about -current? My -current boxes
> also still claim: "sshd version OpenSSH_2.9 FreeBSD localisations
> 20011202"  And this is the problem, if we don't have -current
upgraded
> we have little chance in getting wrinkles out and very little chance of
> it going in -stable. 
> 
> Also maybe we should think again about all our local changes and if all
> of them are really necesary. If we can ditch some, that will also make
> it a lot easier to upgrade. 
Funny, my -CURRENT boxes claim:

    SSH-1.99-OpenSSH_3.8.1p1 FreeBSD-20040419

I might check that you're using the version shipped with FreeBSD rather
than a package-installed version, and that your sshd configuration doesn't
include a line to indicate the older version number. 

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Principal Research Scientist, McAfee Research

On Fri, 24 Sep 2004, Robert Watson wrote:
> ...
Sigh, someone is replaying all the old messages to security@, and since
security@ now points to security-team@, I'm getting the replays.  Sorry
for the false positive response, should have looked at the send date
before replying.  We need to go knock some heads together regarding the
replay though, I've received a lot so far.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Principal Research Scientist, McAfee Research