freebsd stable - Jun 2009 - Upgrade OpenSSH in 6.3 and 7.0 RELENG

Hello folks,

I need to upgrade the OpenSSH from the shiped 4.5p1 versions in 6.x and 
7.x branches to 4.5p2 or higher(1).

I've updated the source tree in 6.3 and 7.0 RELENG boxes with a system 
upgrade in mind, but the version is 4.5p1:

# cat /usr/src/crypto/openssh/version.h | grep -i ssh_version_base && 
uname -r
#define SSH_VERSION_BASE        "OpenSSH_4.5p1"
6.3-RELEASE-p1

#cat /usr/src/crypto/openssh/version.h | grep -i ssh_version_base
#define SSH_VERSION_BASE        "OpenSSH_4.5p1"

On the other I see that current vesion in -STABLE is 5.2p1, so upgrade 
to STABLE is an obvious option, but, sincerely, I want to avoid to 
upgrade to -STABLE and I prefer to keep the systems in their current RELENG.

?How can I upgrade the OpenSSH in the _same_ RELENG? ?Maybe using the ports?

(1) It seems correct some pam_ldap related issues: 
http://www.nabble.com/Re:-Password-expiry-warning-message-from-ppolicy-td8071732.html
-- 
Thanks,
Jordi Espasa Clofent

Jordi Espasa Clofent wrote:
> I need to upgrade the OpenSSH from the shiped 4.5p1 versions in 6.x and
> 7.x branches to 4.5p2 or higher(1).
[...]
> ?How can I upgrade the OpenSSH in the _same_ RELENG? ?Maybe using the
> ports?
portsnap fetch update
cd /usr/ports/security/openssh-portable/
make install clean
/etc/rc.d/sshd stop
Set sshd_enable="NO" in /etc/rc.conf
Set openssh_enable="YES" in /etc/rc.conf
/usr/local/etc/rc.d/openssh start

This will enable the 5.2p1 sshd.
The new client is installed as /usr/local/bin/ssh.

Warnings: The above instructions are dumped from brain, untested and may
be incomplete. It Worked For Me(tm) 3 months ago on 6.3. And your box
will probably get a new host key btw.

--
Erik