OpenBSD Journal

[OpenSSH] OpenSSH 3.0.1 Available

Contributed by Dengue on from the bits-of-crytped-fishies dept.

OpenSSH 3.0.1 has been released, read more for the release announcement. If you are tracking -stable on 2.8, 2.9, or 3.0, or if you are tracking -current , you already have this.

 Subject:  OpenSSH 3.0.1
    Date:  Mon, 19 Nov 2001 17:13:02 +0100
    From:  openssh@openbsd.org
Reply-To:  openssh-unix-dev@mindrot.org
      To:  openssh-unix-announce@mindrot.org,
           openssh-unix-dev@mindrot.org
       CC: lwn@lwn.net, announce@openbsd.org,
           misc@openbsd.org, dengue@deadly.org,
           news@linuxsecurity.com




OpenSSH 3.0.1 has just been released. It will be available from the
mirrors listed at http://www.openssh.com/ shortly.

OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0
implementation and includes sftp client and server support.

We would like to thank the OpenSSH community for their continued
support and encouragement.

Important Changes:
==================

        A security hole that may allow an attacker to authenticate
        if -- and only if -- the administrator has enabled KerberosV.
        By default, OpenSSH KerberosV support only becomes active
        after KerberosV has been properly configured.

        An excessive memory clearing bug (which we believe to be
        unexploitable) also exists, but since this may cause daemon
        crashes, we are providing a fix as well.

        Various other non-critical fixes (~& support and more).

OpenSSH is brought to you by Markus Friedl, Niels Provos, Theo de Raadt,
Kevin Steves, Damien Miller and Ben Lindstrom.

(Comments are closed)


Comments
  1. By Anonymous Coward () on

    anyone else here recently try 'make build' for 3.0 on the patch branch for -stable? I've had no luck, and this is from the official 3.0 CD's, then cvs -rOPENBSD_3_0 recently.

    Error in ...lex/Makefile, etc..

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]