[Bug 493607] Re: rkhunter reports openssl and sshd versions out of date

[furicle]

On Thu, Dec 17, 2009 at 12:23 PM, Andrew Cholakian <andrewvc at gmail.com> wrote:
> furicle,
>
> It looks to me that every security release would require an update to
> the white list unless I'm mistaken.

I don't so.  The problem is because they (Debian based distros like
Ubuntu) PATCH the current version INSTEAD of updating.
So the version number never changes. The .deb gets updated, but the
base version number is static.

The config file would change for every release - but it does anyway
because they package the new version for every release.
It's not any more work than currently *as I understand the process*

Brian

-- 
rkhunter reports openssl and sshd versions out of date
https://bugs.launchpad.net/bugs/493607
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs