Mailing List Archive by Gossamer Threads http://www.gossamer-threads.com/lists/openssh/announce/ en-us (c) Gossamer Threads Inc. All rights reserved. 12 Feb 2012 09:03:14 -0800 120 75 23 http://www.gossamer-threads.com/lists/openssh/announce/ http://www.gossamer-threads.com/images/lists/rss_logo.jpg Hi, Some of the more observant of you have noticed that the just-released OpenSSH-5.9p1 identifies itself as OpenSSH-5.9p2. Don't be worried - it is 06 Sep 2011 05:16:00 -0800 http://www.gossamer-threads.com/lists/openssh/announce/52648 OpenSSH 5.9 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 05 Sep 2011 22:29:50 -0800 http://www.gossamer-threads.com/lists/openssh/announce/52586 Hi, The OpenSSH 5.8p2 release shipped with the wrong version identified embedded in version.h (it still identified itself as "5.8p1"). I have cut and 04 May 2011 19:03:11 -0800 http://www.gossamer-threads.com/lists/openssh/announce/51722 Portable OpenSSH 5.8p2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% com 02 May 2011 17:50:41 -0800 http://www.gossamer-threads.com/lists/openssh/announce/51697 OpenSSH Security Advisory: portable-keysign-rand-helper.adv This document may be found at: http://www.openssh.com/txt/portable-keysign-rand-helper.ad 02 May 2011 17:48:57 -0800 http://www.gossamer-threads.com/lists/openssh/announce/51696 OpenSSH 5.8 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 03 Feb 2011 17:25:17 -0800 http://www.gossamer-threads.com/lists/openssh/announce/51222 OpenSSH Security Advisory: legacy-certs.adv This document may be found at: http://www.openssh.com/txt/legacy-cert.adv 1. Vulnerability Lega 03 Feb 2011 17:24:00 -0800 http://www.gossamer-threads.com/lists/openssh/announce/51221 OpenSSH 5.7 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 23 Jan 2011 17:45:12 -0800 http://www.gossamer-threads.com/lists/openssh/announce/51000 OpenSSH 5.6 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 23 Aug 2010 04:32:25 -0800 http://www.gossamer-threads.com/lists/openssh/announce/50043 OpenSSH 5.5 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 15 Apr 2010 18:03:16 -0800 http://www.gossamer-threads.com/lists/openssh/announce/48890 OpenSSH 5.4 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 07 Mar 2010 18:05:58 -0800 http://www.gossamer-threads.com/lists/openssh/announce/48393 OpenSSH 5.3 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 01 Oct 2009 06:46:17 -0800 http://www.gossamer-threads.com/lists/openssh/announce/46906 OpenSSH 5.2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 22 Feb 2009 18:23:34 -0800 http://www.gossamer-threads.com/lists/openssh/announce/45408 Hi, There was an error in the original advisory. The estimate of 32768 attempts to carry out a successful attack is incorrect. The correct estimate i 23 Nov 2008 13:58:55 -0800 http://www.gossamer-threads.com/lists/openssh/announce/44728 OpenSSH Security Advisory: cbc.adv Regarding the "Plaintext Recovery Attack Against SSH" reported as CPNI-957037[1]: The OpenSSH team has been made 21 Nov 2008 02:19:03 -0800 http://www.gossamer-threads.com/lists/openssh/announce/44716 OpenSSH 5.1 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 21 Jul 2008 17:11:48 -0800 http://www.gossamer-threads.com/lists/openssh/announce/43943 OpenSSH 5.0 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. We apologise for any inconvenien 03 Apr 2008 03:48:30 -0800 http://www.gossamer-threads.com/lists/openssh/announce/42622 OpenSSH 4.9 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 30 Mar 2008 18:35:53 -0800 http://www.gossamer-threads.com/lists/openssh/announce/42529 OpenSSH 4.7 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 04 Sep 2007 17:14:09 -0800 http://www.gossamer-threads.com/lists/openssh/announce/40520 OpenSSH 4.6 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 07 Mar 2007 15:10:22 -0800 http://www.gossamer-threads.com/lists/openssh/announce/39531 OpenSSH 4.5 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 07 Nov 2006 10:40:36 -0800 http://www.gossamer-threads.com/lists/openssh/announce/38715 OpenSSH 4.4 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 27 Sep 2006 14:08:47 -0800 http://www.gossamer-threads.com/lists/openssh/announce/38152 Hi, This mail is a request for vendors who have integrated OpenSSH into their products or devices to step up and provide some financial assistance ba 23 Mar 2006 15:32:04 -0800 http://www.gossamer-threads.com/lists/openssh/announce/36344 Portable OpenSSH 4.3p2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% com 11 Feb 2006 02:25:09 -0800 http://www.gossamer-threads.com/lists/openssh/announce/35781 OpenSSH 4.3 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 01 Feb 2006 04:30:32 -0800 http://www.gossamer-threads.com/lists/openssh/announce/35603 OpenSSH 4.2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 01 Sep 2005 05:21:05 -0800 http://www.gossamer-threads.com/lists/openssh/announce/84 Hi, We would like to make one of our periodic releases shortly, so once again we are asking for readers of this list (or anyone else) to download and 22 Aug 2005 02:41:01 -0800 http://www.gossamer-threads.com/lists/openssh/announce/83 The OpenSSH project turns five years old ---------------------------------------- Five years ago, in late September 1999, the OpenSSH project was sta 04 Jun 2005 21:00:32 -0800 http://www.gossamer-threads.com/lists/openssh/announce/82 OpenSSH 4.1 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 25 May 2005 21:38:31 -0800 http://www.gossamer-threads.com/lists/openssh/announce/80 Hi, The release announcement for OpenSSH 4.0p1 had an incorrect md5sum for the portable tarball. The correct md5 is below, otherwise you may verify 09 Mar 2005 11:30:19 -0800 http://www.gossamer-threads.com/lists/openssh/announce/79 OpenSSH 4.0 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 09 Mar 2005 01:54:13 -0800 http://www.gossamer-threads.com/lists/openssh/announce/78 The OpenSSH project turns five years old ---------------------------------------- Five years ago, in late September 1999, the OpenSSH project was sta 27 Sep 2004 17:30:40 -0800 http://www.gossamer-threads.com/lists/openssh/announce/77 OpenSSH 3.9 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 18 Aug 2004 00:58:49 -0800 http://www.gossamer-threads.com/lists/openssh/announce/76 OpenSSH 3.8.1p1 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. This release is a bug-fix 19 Apr 2004 05:27:50 -0800 http://www.gossamer-threads.com/lists/openssh/announce/75 OpenSSH 3.8 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 24 Feb 2004 08:29:36 -0800 http://www.gossamer-threads.com/lists/openssh/announce/74 Apologies for the delay for the announcement messages to reach the list. For some reason the list manager (Mailman) decided that the messages needed 23 Sep 2003 17:24:42 -0800 http://www.gossamer-threads.com/lists/openssh/announce/73 Subject: Portable OpenSSH Security Advisory: sshpam.adv This document can be found at: http://www.openssh.com/txt/sshpam.adv 1. Versions affected: 23 Sep 2003 04:40:25 -0800 http://www.gossamer-threads.com/lists/openssh/announce/68 Portable OpenSSH 3.7.1p2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/portable.html shortly. Plea 23 Sep 2003 04:39:50 -0800 http://www.gossamer-threads.com/lists/openssh/announce/67 OpenSSH 3.7.1 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH 16 Sep 2003 15:13:10 -0800 http://www.gossamer-threads.com/lists/openssh/announce/65 This is the 1st revision of the Advisory. This document can be found at: http://www.openssh.com/txt/buffer.adv 1. Versions affected: All v 16 Sep 2003 04:32:18 -0800 http://www.gossamer-threads.com/lists/openssh/announce/64 OpenSSH 3.7 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 16 Sep 2003 04:06:59 -0800 http://www.gossamer-threads.com/lists/openssh/announce/63 1. Systems affected: Users of Portable OpenSSH prior to 3.6.1p2 on AIX are affected if OpenSSH was compiled using a non-AIX compiler 29 Apr 2003 19:39:49 -0800 http://www.gossamer-threads.com/lists/openssh/announce/61 OpenSSH 3.6.1p2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. This is a release of the Port 29 Apr 2003 19:37:28 -0800 http://www.gossamer-threads.com/lists/openssh/announce/60 OpenSSH 3.6.1 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH 01 Apr 2003 12:21:46 -0800 http://www.gossamer-threads.com/lists/openssh/announce/59 OpenSSH 3.6 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 31 Mar 2003 04:48:58 -0800 http://www.gossamer-threads.com/lists/openssh/announce/58 OpenSSH 3.5 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 15 Oct 2002 10:58:14 -0800 http://www.gossamer-threads.com/lists/openssh/announce/57 OpenSSH Security Advisory (adv.trojan) 1. Systems affected: OpenSSH version 3.2.2p1, 3.4p1 and 3.4 have been trojaned on the OpenBSD ftp server and 01 Aug 2002 07:47:23 -0800 http://www.gossamer-threads.com/lists/openssh/announce/56 My apologies for not closing the list when it was recreated. This oversight has now been fixed. Thanks to those who brought it to our attention. -d 29 Jul 2002 16:30:09 -0800 http://www.gossamer-threads.com/lists/openssh/announce/55 Please tell us this list is (or will soon be) moderated... -Josh (irilyth@infersys.com) 29 Jul 2002 06:43:40 -0800 http://www.gossamer-threads.com/lists/openssh/announce/47 subscribe openssh-unix-announce 29 Jul 2002 05:27:33 -0800 http://www.gossamer-threads.com/lists/openssh/announce/46 This is the 4th revision of the Advisory. This document can be found at: http://www.openssh.com/txt/preauth.adv 1. Versions affected: Serv 01 Jul 2002 08:30:48 -0800 http://www.gossamer-threads.com/lists/openssh/announce/45 This is the 2nd revision of the Advisory. 1. Versions affected: Serveral versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an 26 Jun 2002 11:08:28 -0800 http://www.gossamer-threads.com/lists/openssh/announce/44 1. Versions affected: All versions of OpenSSH's sshd between 2.9.9 and 3.3 contain an input validation error that can result in 26 Jun 2002 06:42:09 -0800 http://www.gossamer-threads.com/lists/openssh/announce/42 OpenSSH 3.4 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 26 Jun 2002 06:40:30 -0800 http://www.gossamer-threads.com/lists/openssh/announce/43 On Mon, Jun 24, 2002 at 03:00:10PM -0600, Theo de Raadt wrote: > Date: Mon, 24 Jun 2002 15:00:10 -0600 > From: Theo de Raadt <deraadt@cvs.openbsd.org> 24 Jun 2002 13:06:31 -0800 http://www.gossamer-threads.com/lists/openssh/announce/41 OpenSSH 3.3 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 21 Jun 2002 11:50:56 -0800 http://www.gossamer-threads.com/lists/openssh/announce/40 OpenSSH 3.2.3 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH 23 May 2002 00:08:12 -0800 http://www.gossamer-threads.com/lists/openssh/announce/39 OpenSSH 3.2.2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH 16 May 2002 14:36:19 -0800 http://www.gossamer-threads.com/lists/openssh/announce/38 This is the 2nd revision of the Advisory. Buffer overflow in OpenSSH's sshd if AFS has been configured on the system or if KerberosTgtPassing or AFST 26 Apr 2002 03:59:56 -0800 http://www.gossamer-threads.com/lists/openssh/announce/37 A buffer overflow exists in OpenSSH's sshd if sshd has been compiled with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing has been enab 20 Apr 2002 19:39:31 -0800 http://www.gossamer-threads.com/lists/openssh/announce/36 1. Systems affected: All versions of OpenSSH between 2.0 and 3.0.2 contain an off-by-one error in the channel code. OpenSSH 07 Mar 2002 03:56:33 -0800 http://www.gossamer-threads.com/lists/openssh/announce/35 OpenSSH 3.1 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 07 Mar 2002 03:55:57 -0800 http://www.gossamer-threads.com/lists/openssh/announce/34 The openssh-unix-announce@mindrot.org mailing list has just been migrated from Majordomo to Mailman[1]. Posting to the mailing list should be unaffect 29 Dec 2001 23:10:20 -0800 http://www.gossamer-threads.com/lists/openssh/announce/33 OpenSSH 3.0.2 has just been released. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH 04 Dec 2001 04:48:19 -0800 http://www.gossamer-threads.com/lists/openssh/announce/32 -- | By convention there is color, \\ Damien Miller <djm@mindrot.org> | By convention sweetness, By convention bitterness, \\ www.mindrot.org | 20 Nov 2001 18:54:35 -0800 http://www.gossamer-threads.com/lists/openssh/announce/31 : A message that you sent could not be delivered to one or more of its : recipients. This is a permanent error. The following address(es) failed: : : 19 Sep 2001 12:55:38 -0800 http://www.gossamer-threads.com/lists/openssh/announce/30 x11-ssh-askpass version 1.2.4.1 (code name: Etouffee) is now available from the following locations: http://www.poboxc.com/~jmknoble/software/x11-s 17 Sep 2001 17:21:19 -0800 http://www.gossamer-threads.com/lists/openssh/announce/29 On Wed, Aug 22, 2001 at 10:56:32PM -0500, Tommaso Cucinotta wrote: > as an example of SSP-Lite middleware, I modified the > OpenSSH-2.9p2 sources to s 23 Aug 2001 23:55:05 -0800 http://www.gossamer-threads.com/lists/openssh/announce/28 ---------- Forwarded message ---------- Date: Mon, 18 Jun 2001 12:14:46 +0100 From: Simon Wilkinson <simon@sxw.org.uk> To: openssh-unix-dev@mindrot.or 18 Jun 2001 07:30:57 -0800 http://www.gossamer-threads.com/lists/openssh/announce/27 Portable OpenSSH 2.9p2 has just been uploaded and shall be making its way to the mirrors listed at http://www.openssh.com/portable.html shortly. This 17 Jun 2001 23:01:15 -0800 http://www.gossamer-threads.com/lists/openssh/announce/26 OpenSSH 2.9 has just been uploaded. It will be available from the mirrors listed at http://www.openssh.com/ shortly. OpenSSH is a 100% complete SSH p 02 May 2001 13:35:01 -0800 http://www.gossamer-threads.com/lists/openssh/announce/25 Portable OpenSSH 2.5.2p2 is now available from the mirror sites listed at http://www.openssh.com/portable.html Security related changes: Impr 22 Mar 2001 02:43:56 -0800 http://www.gossamer-threads.com/lists/openssh/announce/24 Portable OpenSSH 2.5.1p2 has just been uploaded and will be making its way to the mirror sites (http://www.openssh.com/portable.html) in due course. 28 Feb 2001 16:41:11 -0800 http://www.gossamer-threads.com/lists/openssh/announce/23 Portable OpenSSH 2.5.1p1 has just been uploaded. It will be available from the mirrors listed at http://www.openssh.com/portable.html shortly. OpenS 19 Feb 2001 08:00:00 -0800 http://www.gossamer-threads.com/lists/openssh/announce/22 Thanks to the generosity of Rob Hagopian <rob@hagopian.net>, portable OpenSSH now has a public anonymous CVS tree and a mirror of the snapshots on a 12 Dec 2000 20:41:06 -0800 http://www.gossamer-threads.com/lists/openssh/announce/21 This is to announce the release of portable openssh-2.3.0p1. This release includes many new features and bug fixes. This is a recommended upgrade if y 06 Nov 2000 16:43:15 -0800 http://www.gossamer-threads.com/lists/openssh/announce/20 Version 2.2.0p1 of portable OpenSSH has just been uploaded to the master site and should be making its way to the mirrors in due course. http://www. 01 Sep 2000 16:24:12 -0800 http://www.gossamer-threads.com/lists/openssh/announce/19 I have just uploaded portable OpenSSH 2.1.1p4, it should be making its way to the mirrors listed at http://www.openssh.com/portable.html soon. This r 15 Jul 2000 22:07:44 -0800 http://www.gossamer-threads.com/lists/openssh/announce/18 The 2.1.1p3 release of portable OpenSSH has been uploaded to the OpenBSD ftp master site. In a few hours it will be available from one of the many mir 12 Jul 2000 03:51:41 -0800 http://www.gossamer-threads.com/lists/openssh/announce/17 Announcing the release of portable OpenSSH 2.1.1p2. This release primarily contains fixes to the bugs that have been reported over the last month, in 01 Jul 2000 02:22:36 -0800 http://www.gossamer-threads.com/lists/openssh/announce/16 Announcing the availability of portable OpenSSH 2.1.1p1. This release contains the fix for the "UseLogin yes" vulnerability identified in Markus' rel 09 Jun 2000 15:08:03 -0800 http://www.gossamer-threads.com/lists/openssh/announce/15 -- | "Bombay is 250ms from New York in the new world order" - Alan Cox | Damien Miller - http://www.mindrot.org/ | Email: djm@mindrot.org (home) -or- 09 Jun 2000 14:56:37 -0800 http://www.gossamer-threads.com/lists/openssh/announce/14 This is to announce the availability of portable OpenSSH-2.1.0p2. This is a bug-fix release, addressing the following issues: - X authentication work 20 May 2000 01:13:06 -0800 http://www.gossamer-threads.com/lists/openssh/announce/13 For the last couple of months, the OpenBSD team has been working hard to implement the SSH2 protocol in OpenSSH. The SSH2 protcol offers a number of 01 May 2000 16:32:56 -0800 http://www.gossamer-threads.com/lists/openssh/announce/12 The Unix/Linux port of OpenSSH 1.2.3 was released yesterday and should be available from a mirror near you. A mirror list is available from: http://v 24 Mar 2000 17:00:30 -0800 http://www.gossamer-threads.com/lists/openssh/announce/11 It gives me no little pleasure to announce the first stable release of the Unix port of OpenSSH. It is available in tar.gz and RPM format from one o 26 Jan 2000 21:12:59 -0800 http://www.gossamer-threads.com/lists/openssh/announce/10 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A couple of silly errors, and one dangerous bug were in the pre26 release. This release corrects them 16 Jan 2000 18:50:28 -0800 http://www.gossamer-threads.com/lists/openssh/announce/9 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have uploaded openssh-1.2.1pre26. Please use a mirror: http://violet.ibs.com.au/openssh/files/MIRRO 15 Jan 2000 22:59:08 -0800 http://www.gossamer-threads.com/lists/openssh/announce/8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1.2.1pre25 is out. Please use a mirror: http://violet.ibs.com.au/openssh/files/MIRRORS.html The foll 06 Jan 2000 23:43:39 -0800 http://www.gossamer-threads.com/lists/openssh/announce/7 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 openssh-1.2.1pre24 is being uploaded to: http://violet.ibs.com.au/openssh/files/ This release fixes t 30 Dec 1999 15:46:34 -0800 http://www.gossamer-threads.com/lists/openssh/announce/6 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 openssh-1.2.1pre23 is available on: http://violet.ibs.com.au/openssh/files/ Highlights of this releas 29 Dec 1999 22:01:39 -0800 http://www.gossamer-threads.com/lists/openssh/announce/5 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded 1.2.1pre22 to: http://violet.ibs.com.au/openssh/files/ This release consists of 27 Dec 1999 20:51:39 -0800 http://www.gossamer-threads.com/lists/openssh/announce/4 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 openssh-1.2.1pre21 has just been uploaded. This incorporates yet more fixes from Andre Lucas and Ben T 25 Dec 1999 19:49:14 -0800 http://www.gossamer-threads.com/lists/openssh/announce/3 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 openssh-1.2.1pre20 has been released at: http://violet.ibs.com.au/openssh/files/ This release integr 24 Dec 1999 15:30:31 -0800 http://www.gossamer-threads.com/lists/openssh/announce/2 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenSSH-1.2.1pre19 has been released. http://violet.ibs.com.au/openssh/files/MIRRORS.html The major 21 Dec 1999 17:18:17 -0800 http://www.gossamer-threads.com/lists/openssh/announce/1