[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[gsi-openssh] [ANNOUNCE] GSI-OpenSSH 3.4 Released



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The GSI-OpenSSH development team announces the release of version 3.4 of
the GSI-Enabled OpenSSH software distribution.  GSI-OpenSSH 3.4 is based
on OpenSSH 3.8.1p1 and NCSA's latest GSI patch for that version of
OpenSSH.  A summary of the major changes found in this version is given
at the end of this document.

    ***  This release fixes a serious security vulnerability,  ***
    ***  as reported in the security advisory at               ***
    ***  <http://grid.ncsa.uiuc.edu/ssh/implicitlogin.adv>.    ***
    ***  We strongly recommend upgrading all installations     ***
    ***  to this new release immediately.                      ***
				   
GSI-OpenSSH 3.4 is available for download from

  <ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/bundle/3.4/>

For installation instructions, please see

  <http://grid.ncsa.uiuc.edu/ssh/install.html>

We appreciate your feedback and help in testing this version.  Please
use our bugzilla system to report GSI-OpenSSH bugs to the GSI-OpenSSH
team.  This bugzilla system is located at:

   <https://bugzilla.ncsa.uiuc.edu/index.cgi>

GSI-OpenSSH 3.4 Major changes

   New features

      * None.

   Bugs fixed

      * Fixed serious security vulnerability reported at
        <http://grid.ncsa.uiuc.edu/ssh/implicitlogin.adv>.
	Upgrading to this release immediately is strongly advised.

      * Fixed GSSAPI user authentication to always use
        fully-qualified hostnames for server authentication.

GSI-OpenSSH 3.4 File MD5 Checksums

57de592fbf03994c6c6913798a2e1128  gsi_openssh-3.4-src.tar.gz
20e11b0023bb13abf07bdbc239d534cb  gsi_openssh_bundle-3.4-src.tar.gz
7179ec9ac3c77c65f97458229c5faaa8  gsi_openssh_compat-3.4-src.tar.gz
b1c49a801fbec3f00557c0fd87ef074a  gsi_openssh_setup-3.4-src.tar.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/>

iD8DBQFA9I+iNe2bgrslpukRAj9mAJ0Z8dJw51DuLyrgMlR/VTr0UMu9UQCeMqhu
3NnkqpafHq/CtAhgDx7rrzY=
=8bxg
-----END PGP SIGNATURE-----