Red Hat

Hi,

I would like to know if should i patch my system and sshd based on the version that i have here below:

cat /etc/redhat-release
Red Hat Enterprise Linux ES release 4 (Nahant Update 5)
------------
uname -a: redhat kernel version and type (64-bit or not)
Linux server2 2.6.9-55.ELsmp #1 SMP Fri Apr 20 17:03:35 EDT 2007 i686 athlon i386 GNU/Linux
----------------------------
RedHat kernel build
For the most curious ones, here's the last command. Use it to confirm who and when compiled the RedHat kernel you're using, and what gcc compiler was used in the build process.
bash-3.1$ cat /proc/version
Linux version 2.6.9-55.ELsmp (brewbuilder@ls20-bc2-14.build.redhat.com) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-3)) #1 SMP Fri Apr 20 17:03:35 EDT 2007

------------------------------
- ssh -V: find out what version of sshd:
ssh version: OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003

If there are patches, could you please help where to download them?

Must appreciate.

Thanks

Red Hat (and linux in general) does not do "patches" per se. The updates are performed with full packages. Most people use a RHN subscription of some sort, though you could roll your own upgrades if you are not doing RHN subscriptions by downloading source rpms or going with CentOS built rpms.

As for your other questions:

You are not running 64bit. If you were, the architecture would not be i386

The lastest version of OpenSSL for RHEL4 is openssh-3.9p1-8. If you have a Redhat subscription you can download and install it using up2date. Otherwise you can get the source RPM at ftp://ftp.redhat.com/pub/redhat/linu...os/i386/SRPMS/ and build it yourself.