Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #172696
| From | davidson@freevolt.org |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Need a tutorial |
| Date | 2016-09-23 05:10 +0200 |
| Message-ID | <skp29-6CX-5@gated-at.bofh.it> (permalink) |
| References | <sjQxs-1Ea-15@gated-at.bofh.it> <skacN-5BK-3@gated-at.bofh.it> <skaZb-68M-7@gated-at.bofh.it> <skeT7-bk-19@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
On Thu, 22 Sep 2016, Gene Heskett wrote:
> On Thursday 22 September 2016 08:06:34 Lars Noodén wrote:
>> OpenSSH 6.5 or later will support it. Wheezy had 6.0 (but 6.6 is in
>> the backports), and Jessia has 6.7, and Stretch is getting 7.3. The
>> release notes for 6.5 just mention that it is "better" for security
>> and performance.
>
> And I am on wheezy yet, because it Just Works,
Same here. Wheezy.
> so I have 6.6p1-4bpo70+1, presumably with a bunch of patches. So
> there is no way to easily determine what patches have been
> applied.
Not sure I follow you here.
> I don't see a ChangeLog in any of those packages.
On my system:
$ for pkg in openssh-{client,server} ; do apt-get changelog ${pkg} ; done
Err Changelog for openssh-client (http://packages.debian.org/changelogs/pool/updates/main/o/openssh/openssh_6.0p1-4+deb7u6/changelog)
404 Not Found [IP: 213.165.95.4 80]
Err Changelog for openssh-client (http://security.debian.org/pool/updates/main/o/openssh/openssh_6.0p1-4+deb7u6.changelog)
404 Not Found [IP: 128.101.240.215 80]
E: changelog download failed
Err Changelog for openssh-server (http://packages.debian.org/changelogs/pool/updates/main/o/openssh/openssh_6.0p1-4+deb7u6/changelog)
404 Not Found [IP: 5.153.231.3 80]
Err Changelog for openssh-server (http://security.debian.org/pool/updates/main/o/openssh/openssh_6.0p1-4+deb7u6.changelog)
404 Not Found [IP: 128.101.240.215 80]
E: changelog download failed
As shown, I get only errors, not changelogs. But, as you can already
tell from the errors above, I don't have the backported release 6.6 of
either package installed:
$ dpkg-query -W openssh-{client,server}
openssh-client 1:6.0p1-4+deb7u6
openssh-server 1:6.0p1-4+deb7u6
Instead I currently have installed release 6.0, from regular wheezy
repo, and the last applied update was a security update.
But, regardless, just because "apt-get changelog" can't get them
doesn't mean *I* can't get the changelogs for my version, and examine
patches. For example:
$ apt-get --diff-only source openssh-client="$(dpkg-query -Wf '${Version}' openssh-client)"
[output snipped]
$ ls # notice the absence of "-client,-server" in filename; hence, afaict, apt-get changelog fails
openssh_6.0p1-4+deb7u6.debian.tar.gz
$ gunzip openssh_6.0p1-4+deb7u6.debian.tar.gz && tar xf openssh_6.0p1-4+deb7u6.debian.tar
$ head debian/changelog
openssh (1:6.0p1-4+deb7u6) wheezy-security; urgency=high
* Non-maintainer upload by the Long Tem Security Team.
* Limit password length to avoid DOS attack (CVE-2016-6515). Closes:
#833823.
-- Ola Lundqvist <opal@debian.og> Tue, 09 Aug 2016 09:56:02 +0000
openssh (1:6.0p1-4+deb7u5) wheezy-security; urgency=high
$ ls debian/patches/*.patch | wc -l
35
So that's my system.
Now, you say you have the backported releases, version 1:6.6p1-4~bpo70+1 installed on yours.
But "apt-get changelog" *will* fetch changelogs for this version. Running this command
$ for pkg in openssh-{client,server} ; do apt-get changelog ${pkg}=1:6.6p1-4~bpo70+1 ; done
on my system shows them to me. I believe it should do so on yours,
too, if you have wheezy-backports repo enabled in your sources.list.
If running, on your system,
$ for pkg in openssh-{client,server} ; do apt-get changelog ${pkg} ; done
without specifying a version does not also show you those same
changelogs, then something does not add up.
Cheers.
--
# Duplex (telecommunications) - Wikipedia, the free encyclopedia
Systems that do not need the duplex capability may instead use
simplex communication, in which one device transmits and the others
can only "listen". Examples are broadcast radio and television,
garage door openers, baby monitors, wireless microphones, and
surveillance cameras. In these devices communication is only in one
direction.
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-21 16:20 +0200
Re: Need a tutorial Greg Wooledge <wooledg@eeg.ccf.org> - 2016-09-21 16:30 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-21 22:40 +0200
Re: Need a tutorial Lars Noodén <lars.nooden@gmail.com> - 2016-09-22 09:50 +0200
Re: Need a tutorial <tomas@tuxteam.de> - 2016-09-22 10:50 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-22 13:20 +0200
Re: Need a tutorial <tomas@tuxteam.de> - 2016-09-22 14:10 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-22 18:00 +0200
Re: Need a tutorial Lars Noodén <lars.nooden@gmail.com> - 2016-09-22 18:10 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-22 18:40 +0200
Re: Need a tutorial Lars Noodén <lars.nooden@gmail.com> - 2016-09-22 14:10 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-22 18:20 +0200
Re: Need a tutorial davidson@freevolt.org - 2016-09-23 05:10 +0200
Re: Need a tutorial Jude DaShiell <jdashiel@panix.com> - 2016-09-22 15:50 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-22 18:20 +0200
Re: Need a tutorial <tomas@tuxteam.de> - 2016-09-21 18:30 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-21 22:50 +0200
Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-22 17:40 +0200
Re: Need a tutorial Greg Wooledge <wooledg@eeg.ccf.org> - 2016-09-22 17:50 +0200
Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-22 18:20 +0200
Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-22 18:10 +0200
Re: Need a tutorial "Thomas Schmitt" <scdbackup@gmx.net> - 2016-09-22 18:20 +0200
Re: Need a tutorial Greg Wooledge <wooledg@eeg.ccf.org> - 2016-09-22 18:20 +0200
Re: Need a tutorial "Thomas Schmitt" <scdbackup@gmx.net> - 2016-09-22 18:30 +0200
Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-22 20:10 +0200
Re: Need a tutorial Stephan Beck <stebe@mailbox.org> - 2016-09-22 20:30 +0200
Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-22 19:00 +0200
Re: Need a tutorial <tomas@tuxteam.de> - 2016-09-22 19:40 +0200
sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-23 14:40 +0200
Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Greg Wooledge <wooledg@eeg.ccf.org> - 2016-09-23 15:00 +0200
Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-23 16:20 +0200
Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-23 16:20 +0200
Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-23 22:30 +0200
RESOLVED Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-23 15:10 +0200
Re: RESOLVED Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-23 16:00 +0200
Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial <tomas@tuxteam.de> - 2016-09-23 15:20 +0200
Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial Stephan Beck <sbeck@secure.mailbox.org> - 2016-09-23 18:50 +0200
Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial <tomas@tuxteam.de> - 2016-09-24 16:10 +0200
Re: Need a tutorial Dominique Dumont <dod@debian.org> - 2016-09-22 17:30 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-22 18:40 +0200
Re: Need a tutorial Greg Wooledge <wooledg@eeg.ccf.org> - 2016-09-22 19:00 +0200
Re: Need a tutorial Bob Bernstein <poobah@ruptured-duck.com> - 2016-09-22 20:10 +0200
Re: Need a tutorial "Thomas Schmitt" <scdbackup@gmx.net> - 2016-09-22 21:00 +0200
Re: Need a tutorial Lars Noodén <lars.nooden@gmail.com> - 2016-09-22 19:10 +0200
Re: Need a tutorial Dominique Dumont <dod@debian.org> - 2016-09-22 20:20 +0200
Re: Need a tutorial Greg Wooledge <wooledg@eeg.ccf.org> - 2016-09-22 20:40 +0200
Re: Need a tutorial Dominique Dumont <dod@debian.org> - 2016-09-22 20:50 +0200
Re: Need a tutorial Gene Heskett <gheskett@shentel.net> - 2016-09-23 04:30 +0200
Re: Need a tutorial Dominique Dumont <dod@debian.org> - 2016-09-23 09:20 +0200
csiph-web