From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 5143 invoked by alias); 8 Nov 2006 09:26:56 -0000 Received: (qmail 2990 invoked by uid 22791); 8 Nov 2006 09:24:46 -0000 X-Spam-Check-By: sourceware.org Date: Wed, 08 Nov 2006 09:26:00 -0000 From: Corinna Vinschen To: cygwin-announce@cygwin.com Subject: Updated: OpenSSH-4.5p1-1 Message-ID: <20061108092437.GB10264@calimero.vinschen.de> Mail-Followup-To: cygwin-announce@cygwin.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2i Mailing-List: contact cygwin-announce-help@cygwin.com; run by ezmlm Precedence: bulk List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-announce-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Reply-To: The Cygwin Mailing List X-SW-Source: 2006-11/txt/msg00012.txt.bz2 I've just updated the version of OpenSSH to 4.5p1-1. This is a new major upstream release. The Cygwin release is created from the vanilla sources. The problem in http://cygwin.com/ml/cygwin/2006-10/msg00250.html and http://cygwin.com/ml/cygwin/2006-10/msg00513.html has been rectified. I reported this problem upstream and the patch in http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=116288601229538 has been applied. So it's not further necessary to create a (fake) sshd account with 4.5p1 in the scenario described in the above mails. The official release message of 4.5p1: ==================================================================== OpenSSH 4.5 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots and purchased T-shirts or posters. T-shirt, poster and CD sales directly support the project. Pictures and more information can be found at: http://www.openbsd.org/tshirts.html and http://www.openbsd.org/orders.html For international orders use http://https.openbsd.org/cgi-bin/order and for European orders, use http://https.openbsd.org/cgi-bin/order.eu Changes since OpenSSH 4.4: ============================ This is a bugfix only release. No new features have been added. Security bugs resolved in this release: * Fix a bug in the sshd privilege separation monitor that weakened its verification of successful authentication. This bug is not known to be exploitable in the absence of additional vulnerabilities. This release includes the following non-security fixes: * Several compilation fixes for portable OpenSSH * Fixes to Solaris SMF/process contract support (bugzilla #1255) Thanks to everyone who has contributed patches, reported bugs and tested releases. Checksums: ========== - SHA1 (openssh-4.5.tar.gz) = def3de1557181062d788695b9371d02635af39fb - SHA1 (openssh-4.5p1.tar.gz) = 2eefcbbeb9e4fa16fa4500dec107d1a09d3d02d7 Reporting Bugs: =============== - please read http://www.openssh.com/report.html and http://bugzilla.mindrot.org/ OpenSSH is brought to you by Markus Friedl, Niels Provos, Theo de Raadt, Kevin Steves, Damien Miller, Darren Tucker, Jason McIntyre, Tim Rice and Ben Lindstrom. ==================================================================== To update your installation, click on the "Install Cygwin now" link on the http://cygwin.com/ web page. This downloads setup.exe to your system. Then, run setup and answer all of the questions. *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=3D3Dyourdomain.com@cygwin.com If you need more information on unsubscribing, start reading here: http://sources.redhat.com/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL. -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Project Co-Leader cygwin AT cygwin DOT com Red Hat