Slashdot Mirror


OpenSSH 3.5 Released

Dan writes "Markus Friedl announces that OpenSSH 3.5 has just been released with notable updates since 3.4. It will be available from the mirrors listed at http://www.openssh.com/ shortly. Enhancements include bug fixes, improved support for Privilege Separation (Portability, Kerberos, PermitRootLogin handling), RSA blinding in order to avoid timing attacks against the RSA host key and much more. Congratulations are in order for the OpenSSH team's hard work and efforts."

2 of 140 comments (clear)

  1. My one bugbear by muzzmac · · Score: 5, Interesting

    Have they put in provisions to separate the SFTP and interactive shell or command execution protocols?

    Last time I tried to play with SFTP I could not get an external company to have SFTP access without a lot of shell level mucking around to stop them having access to log in via shells or rlogin style features.

    And yes I'm lazy, yes I should ask the question in the correct forum and yes I should probably contribute to the project but I am, I couldn't be bothered finding it again and I would be useless to them.

    Anyway congratulations and thinkyou for what is other than my stupid whinge a great product. (Opensource or otherwise)

  2. Re:Too much change? by gol64738 · · Score: 3, Interesting

    it's likely that the sysadmins had you replace your open source products with a commercial one for blame/fault purposes.
    big corporation sysadmins like to point fingers when something fucks up..otherwise, it's their head.
    by sticking to commercial software, corporate sysadmins can keep that shitball rolling, all the way back to the product company.