CentOS How to upgrade openssh to 6.9

Question

I have to upgrade openssh. I follow this page just instead the rpm 6.7 to 6.9

But When I run rpm -Uvh /root/rpmbuild/RPMS/x86_64/*.rpm

I had problem :

error: Failed dependencies:
    openssh = 5.3p1-111.el6 is needed by (installed) openssh-askpass-5.3p1-1                      11.el6.x86_64

How can I fix this problem ?

That page is yet another thing on the Internet with bad advice. Don't even attempt to do it; you will only damage your system (and possibly beyond repair). And it's not even necessary. — Michael Hampton, Jul 28 '15 at 14:31
because security issue.the security tool(openvas) said a isuue about 'x11_open_ helper()' . it said I need to upgrade to 6.9 — user2492364, Jul 29 '15 at 00:59
You fix it by ignoring openvas and actually paying attention to the correct advice you were given below. — Michael Hampton, Jul 29 '15 at 03:48
Please, listen to Michael. Your tool (like most automated auditing tools) is stupid. You can read a bit more about Red Hat's patching policy in [this answer](http://serverfault.com/questions/583455/apache-upgrade-strategy/583458#583458), with links for further exploration, if you'd like. — MadHatter, Jul 29 '15 at 04:12

score 4 · Answer 1 · answered Jul 28 '15 at 10:53

4

This bug has been fixed in openssh-5.3p1-104 already and this alone is not a reason to perform a major update of such an integral part as OpenSSH.

That said: If you don't need openssh-askpass (and why would you on a server?), just remove it. If you need it, you have to update it as well.

answered Jul 28 '15 at 10:53

Sven

what is this ````openssh-askpass```` about?? – user2492364 Jul 28 '15 at 10:57
`yum info openssh-askpass`: A passphrase dialog for OpenSSH and X – Sven Jul 28 '15 at 11:04
2

If you need to ask this question: Please stop what you are doing and only use the CentOS-supplied packages. They will contain all relevant security fixes. – Sven Jul 28 '15 at 11:04
Thanks Where can I find it? – user2492364 Jul 28 '15 at 11:10
1

Really? That is what `yum update` is doing. Please learn the fundamentals.... – Sven Jul 28 '15 at 11:11
I try yum update, 5.3 version is the newest. – user2492364 Jul 28 '15 at 11:13
1

Yes, it will update to `openssh-5.3p1-104` (or `openssh-5.3p1-111` in the next few days). This is the newest version supplied by RedHat and CentOS for EL6, it contains the fix and is the version you want to run. – Sven Jul 28 '15 at 11:15
Let us [continue this discussion in chat](http://chat.stackexchange.com/rooms/26371/discussion-between-user2492364-and-sven). – user2492364 Jul 29 '15 at 00:53

1 Answers1