Yellow Dog Linux Bugfix Announcement
------------------------------------

Package:	openssh	
Issue Date: 	June 23, 2001
Priority:	medium 
Advisory ID: 	YDU-20010623-2


1. 	Topic:

	The openssh client that shipped with YDL 2.0
	had broken ssh 1 support.
	

2. 	Problem:

	When trying to connect to an ssh 1-based server,
	openssh would report an error regarding a "bad packet
	length" and then would disconnect.  The temporary
	solution for this was to pass the '-1' argument
	to openssh.  This argument forces openssh to use
	ssh 1 mode.  These updates packages fix the problem
	and no longer require forcing '-1'.


3. 	Solution:

   	a) Updating via yup...
   	We suggest that you use the Yellow Dog Update Program (yup)
   	to keep your system up-to-date. The following command(s) will
   	automatically retrieve and install the fixed version of
   	this update onto your system:

   		yup update openssh
		yup update openssh-askpass
		yup update openssh-askpass-gnome
		yup update openssh-clients
		yup update openssh-server 


   	b) Updating manually...
   	The update can also be retrieved manually from our ftp site
   	below along with the rpm command that should be used to install
   	the update.  (Please use a mirror site)

   		ftp://ftp.terraplex.com/pub/yellowdog/updates/yellowdog-2.0/ppc/RPMS/
		rpm -Fvh openssh-2.9p2-1.ppc.rpm 
		rpm -Fvh openssh-askpass-2.9p2-1.ppc.rpm 
		rpm -Fvh openssh-askpass-gnome-2.9p2-1.ppc.rpm 
		rpm -Fvh openssh-clients-2.9p2-1.ppc.rpm
		rpm -Fvh openssh-server-2.9p2-1.ppc.rpm 



4. Verification

MD5 checksum			  Package
--------------------------------  ----------------------------
a19b981712e5502bb5beb4f2dea35652  SRPMS/openssh-2.9p2-1.src.rpm
6c01aadaf0e0b9ae40cba6b274e3bdb6  ppc/RPMS/openssh-2.9p2-1.ppc.rpm
b5348df382c36982e85df14d5d69c04a  ppc/RPMS/openssh-askpass-2.9p2-1.ppc.rpm
7311dcbaef641d178ece405d4fdd7eb6  ppc/RPMS/openssh-askpass-gnome-2.9p2-1.ppc.rpm
1c462d3e14bd3b9fe10b1a293ff4a2a8  ppc/RPMS/openssh-clients-2.9p2-1.ppc.rpm
06de018d68ab2c29ded2c144855ba4f7  ppc/RPMS/openssh-server-2.9p2-1.ppc.rpm

If you wish to verify that each package has not been corrupted or tampered with,
examine the md5sum with the following command: rpm --checksig --nogpg filename


5. Misc.

Terra Soft has setup a moderated mailing list where these security, bugfix, and package
enhancement announcements will be posted. See http://lists.yellowdoglinux.com/ for more
information.

For information regarding the usage of yup, the Yellow Dog Update Program, see 
http://http://www.yellowdoglinux.com/support/solutions/ydl_general/yup.shtml