Release Announcements

• Fix - Installer finish page - Auto run doesn't work
• New - Installer finish page - Option to create shortcut at desktop 

• Fix - Installer finish page - Auto run doesn't work
• New - Installer finish page - Option to create shortcut at desktop 

- OpenSSH 9.3p

Changes since OpenSSH 9.2
=========================

This release fixes a number of security bugs.

Security
========

This release contains fixes for a security problem and a memory
safety problem. The memory safety problem is not believed to be
exploitable, but we report most network-reachable memory faults as
security bugs.

* ssh-add(1): when adding smartcard keys to ssh-agent(1) with the
per-hop destination constraints (ssh-add -h ...) added in OpenSSH
8.9, a logic error prevented the constraints from being
communicated to the agent. This resulted in the keys being added
without constraints. The common cases of non-smartcard keys and
keys without destination constraints are unaffected. This problem
was reported by Luci Stanescu.

* ssh(1): Portable OpenSSH provides an implementation of the
getrrsetbyname(3) function if the standard library does not
provide it, for use by the VerifyHostKeyDNS feature. A
specifically crafted DNS response could cause this function to
perform an out-of-bounds read of adjacent stack data, but this
condition does not appear to be exploitable beyond denial-of-
service to the ssh(1) client.

The getrrsetbyname(3) replacement is only included if the system's
standard library lacks this function and portable OpenSSH was not
compiled with the ldns library (--with-ldns). getrrsetbyname(3) is
only invoked if using VerifyHostKeyDNS to fetch SSHFP records. This
problem was found by the Coverity static analyzer.

- LibreSSL 3.6.2

• OpenSSH 9.3p
• LibreSSL 3.6.2 (security)

• OpenSSH 9.3p
• LibreSSL 3.6.2

- Python 3.8.10

- Cygwin 3.4.5

- OpenSSH 9.2

- Rsync 3.2.7

• Cygwin 3.4.5

• Cygwin 3.4.5
• Autogenerated password for nagiosadmin user (can be copied to clipboard)

• Cygwin 3.4.5

Copssh Server Admin GUI 1.0.1

• Fix - RSA-2048 complains about wrong ECDSA keysize, wrong key type.
• Fix - ssh-copy-id, create .ssh directory if not exists
• Fix - select proper match block during insertion/deletion
• Improvement - Text field resizing - Navigate to the start after data entry, resizing using less space