Vulnerabilities have been found in the versions of openssl(0.9.7b) and openssh(3.6.1p1+CAN-2004-0175) included with MacOSX 10.3.8. However I am having a very difficult time getting the system to recognized newer versions.
I am able to build and test openssl (0.9.7g) and openssh (4.1p1). The problem is that apache and sshd are still looking at the old versions instead of the new ones in /usr/local/…
I want don’t want to install the new versions on top of the old ones because I may need to revert if I have problems with the new version.
Does anyone know how to tell the system to use the versions of ssh and ssl in /usr/local/… instead of the ones that comes with macox? In particular I need apache to use the correct ssl.
Any help or pointers are appreciated.