Bsrgvty

How could a sequence of random dates be generated, given year interval?

Protecting Seals from Forgery

Why did Grima shed a tear?

Why does Bane's stock exchange robbery actually work to bankrupt Bruce Wayne?

Temporarily modify the way a counter is displayed in an existing environment

Responsibility for arrangement of elements - frontend or backend?

How to formulate a MIP that can minimize the costs with a combination of subsets given a set?

Heat involved in isenthalpic process

Why do microwaves use magnetron?

How do functional equations for zeta functions arise from the structure of a homology group?

Various syntax errors when measuring the execution time of a script

Moonlight Sonata vs K.331 Andante Grazioso

Coworkers accusing me of "cheating" for working more efficiently

How should I add a bit of space below a substack in an overset?

Why would Climate activists disrupt public transport?

How short does a trip need to be before flying is less safe than other forms of transportation?

Tips for attracting more math majors in a liberal arts college mathematics department

What type of key profile is this?

How does kinetic energy work in braking a vehicle?

Did the Allies reverse the threads on secret microfilm-hiding buttons to thwart the Germans?

Is the extra damage from an Oathbow doubled on a critical hit?

Hangman game backward #12

"Du hast es gut", small talk meaning?

For a command to increase something, should instructions refer to the "+" key or the "=" key?

SSH version shows older one after upgrading

ssh refusing connection with message “no hostkey alg”Remote Ubuntu 12.04 desktop cannot display X on local laptopsuddenly can't SSH (connection refused), sshd service not recognizedPublic key authentication Permission denied (publickey)SSH Invalid key length on embedded deviceProblems getting bidirectional ssh working between Ubuntu 14 and Ubuntu 18

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty
margin-bottom:0;

0

I've upgraded OpenSSH version in my Ubuntu 18.04 server to 7.9 to fix User enumeration vulnerability.
When I enter the following command, the output is:

ssh -V

OpenSSH_7.9p1, OpenSSL 1.0.2n 7 Dec 2017

But when I run telnet on port 22 it shows Ubuntu 18.04's default ssh version

telnet localhost 22

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

When I run

ssh -v localhost

debug1: Local version string SSH-2.0-OpenSSH_7.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

Which means the vulnerability is not fixed yet.

1. Appreciate if anyone can explain why it shows two different versions as (local version & remote protocol version)?


2. If OpenSSH is not upgraded properly, how I can actually upgrade the OpenSSH?

ssh openssh

share|improve this question

asked May 31 at 18:11

VithulanVithulan

1

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  openssh-client and openssh-server are two different packages? How did you do the upgrade?
  
  – FedonKadifeli
  May 31 at 18:20
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Downloaded it from cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/… cd openssh-7.9p1 sudo apt-get update sudo apt-get install build-essential sudo apt-get install zlib1g-dev apt-get install openssl openssl-dev apt install libssl1.0-dev ./configure --sysconfdir=/etc/ssh make make install
  
  – Vithulan
  May 31 at 18:35
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Which CVE were you trying to patch?
  
  – user535733
  May 31 at 18:36
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Your output seems to show that you upgraded your openssh client, not server.
  
  – user535733
  May 31 at 18:38
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @user535733 I was trying to fix Username enumeration Vulnerability. And oh I see, then I should download openssh-server right?
  
  – Vithulan
  May 31 at 18:41
  

  
  
  
  

 | 
show 5 more comments

0

I've upgraded OpenSSH version in my Ubuntu 18.04 server to 7.9 to fix User enumeration vulnerability.
When I enter the following command, the output is:

ssh -V

OpenSSH_7.9p1, OpenSSL 1.0.2n 7 Dec 2017

But when I run telnet on port 22 it shows Ubuntu 18.04's default ssh version

telnet localhost 22

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

When I run

ssh -v localhost

debug1: Local version string SSH-2.0-OpenSSH_7.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

Which means the vulnerability is not fixed yet.

1. Appreciate if anyone can explain why it shows two different versions as (local version & remote protocol version)?


2. If OpenSSH is not upgraded properly, how I can actually upgrade the OpenSSH?

ssh openssh

share|improve this question

asked May 31 at 18:11

VithulanVithulan

1

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  openssh-client and openssh-server are two different packages? How did you do the upgrade?
  
  – FedonKadifeli
  May 31 at 18:20
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Downloaded it from cdn.openbsd.org/pub/OpenBSD/OpenSSH/portable/… cd openssh-7.9p1 sudo apt-get update sudo apt-get install build-essential sudo apt-get install zlib1g-dev apt-get install openssl openssl-dev apt install libssl1.0-dev ./configure --sysconfdir=/etc/ssh make make install
  
  – Vithulan
  May 31 at 18:35
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Which CVE were you trying to patch?
  
  – user535733
  May 31 at 18:36
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Your output seems to show that you upgraded your openssh client, not server.
  
  – user535733
  May 31 at 18:38
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @user535733 I was trying to fix Username enumeration Vulnerability. And oh I see, then I should download openssh-server right?
  
  – Vithulan
  May 31 at 18:41
  

  
  
  
  

 | 
show 5 more comments

I've upgraded OpenSSH version in my Ubuntu 18.04 server to 7.9 to fix User enumeration vulnerability.
When I enter the following command, the output is:

ssh -V

OpenSSH_7.9p1, OpenSSL 1.0.2n 7 Dec 2017

But when I run telnet on port 22 it shows Ubuntu 18.04's default ssh version

telnet localhost 22

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

When I run

ssh -v localhost

debug1: Local version string SSH-2.0-OpenSSH_7.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

Which means the vulnerability is not fixed yet.

1. Appreciate if anyone can explain why it shows two different versions as (local version & remote protocol version)?


2. If OpenSSH is not upgraded properly, how I can actually upgrade the OpenSSH?

ssh openssh

share|improve this question

asked May 31 at 18:11

VithulanVithulan

1

ssh -V

OpenSSH_7.9p1, OpenSSL 1.0.2n 7 Dec 2017

telnet localhost 22

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

ssh -v localhost

debug1: Local version string SSH-2.0-OpenSSH_7.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

share|improve this question

asked May 31 at 18:11

VithulanVithulan

1

share|improve this question

asked May 31 at 18:11

VithulanVithulan

1

asked May 31 at 18:11

VithulanVithulan

1

asked May 31 at 18:11

VithulanVithulan

1