rpm version-release in Version strings of OpenSSH, Apache etc?

[Nils O. Selåsdal]

On Fri, 2003-09-26 at 11:30, Pekka Savola wrote:
> Hi,
> 
> Would it make sense to add the rpm version-release strings in the OpenSSH, 
> Apache, etc. banners, e.g. like..:
> 
> SSH-1.99-OpenSSH_3.5p1 3.5p1-11
> 
> instead of just:
> 
> SSH-1.99-OpenSSH_3.5p1
> 
> .. this should be rather straightforward for the build process.
> 
> The gain would be that if you e.g. perform security scans in your network 
> you could identify whether a patched version has been installed in the 
> systems in question..
And so could an attacker.
Making sure your network is up2date is probably best resolved at some higher
management level.