search for: v_9_9

Hi, This is mostly a note for downstream distributors of OpenSSH. I've just pushed fixes to the V_9_9 stable branch for a bug in the mlkem768x25519-sha256 key exchange algorithm that was added in this release that causes connection failures when connecting between big-endian and little-endian hosts. The problem is on the big-endian side. No change is required for the more common little-endian arch...

On Sun, Oct 27, 2024 at 03:45:33PM +1100, Damien Miller wrote: > This is mostly a note for downstream distributors of OpenSSH. I've > just pushed fixes to the V_9_9 stable branch for a bug in the > mlkem768x25519-sha256 key exchange algorithm that was added in this > release that causes connection failures when connecting between > big-endian and little-endian hosts. > > The problem is on the big-endian side. No change is required for > the...

On 27/10/2024 05:45, Damien Miller wrote: > If you distribute OpenSSH to big-endian systems and have packaged > OpenSSH 9.9 already, then I recommend you include these fixes as the > next release of OpenSSH will make this key exchange algorithm the > default. > I tried to update my Solaris builds but ran into a build error. In file included from kexmlkem768x25519.c:50:

On Tue, 29 Oct 2024, Tom G. Christensen wrote: > On 27/10/2024 05:45, Damien Miller wrote: > > If you distribute OpenSSH to big-endian systems and have packaged > > OpenSSH 9.9 already, then I recommend you include these fixes as the > > next release of OpenSSH will make this key exchange algorithm the > > default. > > > > I tried to update my Solaris

https://bugzilla.mindrot.org/show_bug.cgi?id=3739 Bug ID: 3739 Summary: Match parsing requires space before '=' Product: Portable OpenSSH Version: 9.9p1 Hardware: amd64 OS: Linux Status: NEW Severity: normal Priority: P5 Component: ssh Assignee: unassigned-bugs at

Hi, This is a semi-periodic reminder that we sometime check in small but signficant fixes to the current release's stable branch. For example, the current release has already accrued a few small fixes: https://anongit.mindrot.org/openssh.git/log/?h=V_9_9 If you maintain OpenSSH for an organisation or downstream distribution, we recommend tracking fixes on these branches. The fixes that land on these branches have been portability and reliability fixes only. We'd almost certainly do a full release for any significant security problem. -d