[gsi-openssh] [ANNOUNCE] GSI-OpenSSH 3.6 Released

[Jim Basney <jbasney@xxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

GSI-OpenSSH 3.6, based on OpenSSH 4.2p1, is now available from:

  <http://grid.ncsa.uiuc.edu/ssh/download.html>

For installation instructions, please see:

  <http://grid.ncsa.uiuc.edu/ssh/install.html>

We appreciate your feedback and help in testing this version.  Please
use our bugzilla system to report GSI-OpenSSH bugs:

  <http://bugzilla.ncsa.uiuc.edu/enter_bug.cgi?product=GSI-enabled%20OpenSSH>

GSI-OpenSSH 3.6 Major changes

   New features

      * Moved to OpenSSH 4.2p1.

      * Incorporated openssh-4.2p1-gsskex-20050926-2.patch from Simon
        Wilkinson adding support for gssapi-keyex authentication
        method (http://www.sxw.org.uk/computing/patches/openssh.html).

      * Incorporated High Performance Networking (HPN) patch
        (openssh-4.2p1-hpn11-none.diff) from Pittsburgh Supercomputing
        Center (http://www.psc.edu/networking/projects/hpn-ssh/) for
        improved network throughput over long and high bandwidth
        links.

      * Enabled PAM password authentication by default, unless PAM
        library and headers are unusable.

   Bugs fixed

      * Only delegate credentials if GSI authentication is used.
        http://bugzilla.ncsa.uiuc.edu/show_bug.cgi?id=300

Please note that the configure script included in OpenSSH 4.2p1 checks
ZLIB_VERSION in zlib.h for zlib versions with known vulnerabilities.
See <http://www.zlib.net/> for details on zlib vulnerabilities.  The
current acceptable versions of zlib are 1.1.4 and 1.2.3.  In cases
where your vendor has not provided a secure version of zlib, please
install the latest version of zlib in an alternate path and set the
- --with-zlib GSI_OPENSSH_GPTMACRO option.  For example:

  gpt-build -verbose gsi_openssh_bundle-3.6-src.tar.gz gcc32dbg \
    GSI_OPENSSH_GPTMACRO="--with-zlib=/usr/local/zlib-1.2.3"

MD5 checksums:
d1e093c92617184600b3b48eac00249f  gsi_openssh-3.6-src.tar.gz
a6c3f94ff9a63662481a06471a69fc0e  gsi_openssh_bundle-3.6-src.tar.gz
f6851d4ed2257cd86103ae984d508047  gsi_openssh_compat-3.6-src.tar.gz
2d4ad548c30819a9634b3b6a5b542b49  gsi_openssh_setup-3.6-src.tar.gz

SHA1 checksums:
0381b1a6ca64d0e45aa5824eef622c6d372cc0eb  gsi_openssh-3.6-src.tar.gz
14c4ee377070fd41655fd34b431239b437efeb8e  gsi_openssh_bundle-3.6-src.tar.gz
a142c408e9aa57e338e978aa4f61d16ec9b482da  gsi_openssh_compat-3.6-src.tar.gz
dda5fe5fdb98145e640907c83915c952c6ea4c7b  gsi_openssh_setup-3.6-src.tar.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/>

iD8DBQFDqt2OspmhAHG7PP0RAn5dAJ9en5eji/Z925umrjbKgSx8pUnMrACfTGRd
IWBftib/NCxntGcNZsOIbIU=
=gh/l
-----END PGP SIGNATURE-----