Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 223951

Summary: version bump: net-misc/openssh-4.8
Product: Gentoo Linux Reporter: Stefan Behte (RETIRED) <craig>
Component: New packagesAssignee: Robin Johnson <robbat2>
Status: RESOLVED WONTFIX    
Severity: enhancement CC: base-system, gentoo-bugs
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Stefan Behte (RETIRED) gentoo-dev Security 2008-05-28 13:00:37 UTC
Would be cool to see it in portage, as it adds chroot()!
http://www.openssh.com/txt/release-4.8
Comment 1 Allen Brooker (AllenJB) 2008-05-28 15:51:01 UTC
OpenSSH 5.0 is already available in portage, marked testing on all archs. Run "emerge --sync" to update your local copy of the package repository, then see the following URL on how to unmask specific packages:
http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=3&chap=3
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2008-05-28 16:14:49 UTC
It _formally_ adds chroot()?

# euses chroot
net-misc/openssh:chroot - Enable chrooting support
Comment 3 Doug Goldstein (RETIRED) gentoo-dev 2008-05-28 16:35:36 UTC
4.8 suffers from a security vulnerability and as such won't be added to the tree. The response by upstream was a release of 5.0 which fixes the issue. Additionally, 4.7_p1-r6 addresses all known security vulnerabilites as well. 4.8 is not supported by upstream for security fixes and general usage.
Comment 4 Stefan Behte (RETIRED) gentoo-dev Security 2008-05-28 18:15:19 UTC
I thought the patch might have been backported to 4.8 and it would be cool to do a minor update from 4.7 to 4.8 and not to 5. Well, that won't work then.

Thanks for the explanation! :)