[gsi-openssh-announce] GSI-OpenSSH 5.7 released

Basney, Jim jbasney at illinois.edu
Mon Nov 11 11:58:32 CST 2013


GSI-OpenSSH 5.7, based on OpenSSH 6.4p1, is now available from:

http://grid.ncsa.illinois.edu/ssh/download.html

OpenSSH 6.4 (included in this release) fixes a security bug in OpenSSH 6.2
(included in GSI-OpenSSH 5.6):

* sshd(8): fix a memory corruption problem triggered during rekeying
  when an AES-GCM cipher is selected. Full details of the vulnerability
  are available at: http://www.openssh.com/txt/gcmrekey.adv

For installation instructions, please see:

http://grid.ncsa.illinois.edu/ssh/install.html

We appreciate your feedback and help in testing this version.
Please use Bugzilla to report GSI-OpenSSH bugs:

http://bugzilla.globus.org/globus/enter_bug.cgi?product=GSI-OpenSSH

The GSI-OpenSSH Project uses the Globus Usage Metrics capability to
collect generic statistics about the use of GSI-OpenSSH software:

http://grid.ncsa.illinois.edu/ssh/privacy.html

Changes in this release:

* Update to OpenSSH 6.4p1
  (http://www.openssh.com/txt/release-6.4)
* Update to HPN14v1
  (http://www.psc.edu/index.php/hpn-ssh)
* Add user activity auditing
  Must be explicitly enabled via --with-nerscmod.
  (https://code.google.com/p/auditing-sshd/)

Checksums/signatures:

$ openssl sha1 < gsi_openssh_bundle-5.7-src.tar.gz
60be6a4c323b2b219e779952fa7eecad7f620603

$ gpg gsi_openssh_bundle-5.7-src.tar.gz.asc
gpg: Signature made Fri Nov  8 13:04:47 2013 PST using RSA key ID 0A33BE15
gpg: Good signature from "Jim Basney <jbasney at ncsa.uiuc.edu>"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5541 bytes
Desc: not available
URL: <http://lists.globus.org/pipermail/gsi-openssh-announce/attachments/20131111/72c3db29/attachment.bin>


More information about the gsi-openssh-announce mailing list