On September 1993 plus 3676 days Albert Whale wrote: > Vox wrote: > >>On September 1993 plus 3676 days Albert Whale wrote: >> >> >>>I am running a System Scan on Several machines. The interesting ones >>>to me are Linux Mandrake 8.2 and 9.1. >>> >>>The issue here is that the Scanning Tools (here I am using Nessus), >>>expect a specific reply in order to accept or reject the applications >>>which are communicating on the Server. >>> >>>Even though the Mandrake OpenSSH software is upgraded to the latest >>>version (openssh-server-3.6.1p2-1.1.82mdk) available for the package >>>(from Mandrake), this still does not reflect the package version >>>supportted for openssh (here being 3.7.1 and above). >>> >>>So how do we simplify this Version Numbering and conform with the >>>Expected results? >>> >> >> We don't :) Check the other openssh related threads of this past >> week or so...you'll see Vincent's reasoning as of why there's not >> and will not be a 3.7.1 in mdk. Vox >> >> > Thanks I'll do that, but this makes the jobs of Justify the Mandrake > Package harder to swallow. Perhaps Gentoo is following the > standards??
Uhmm....what standards? The ones about updating openssh 3 times in 2 days because the version they put out to plug a security hole was rushed out the door and they added a new hole? or the one that got updated because the plug for the 2nd hole in 2 days had stuck in a 3rd hole and had to be updated again? Vincent backported the security patch to a known working version, and we didn't have to update the 2nd nor the 3rd time, only the first one. In my view, *that* justifies the Mandrake Package much much *much* more than the gentoo way. Vox -- Think of the Linux community as a niche economy isolated by its beliefs. Kind of like the Amish, except that our religion requires us to use _higher_ technology than everyone else. -- Donald B. Marti Jr.
pgp00000.pgp
Description: PGP signature
