• LibreSSL 3.8.2

Release Notes from LibreSSL:

We have released LibreSSL 3.8.2, which will be arriving in the
LibreSSL directory of your local OpenBSD mirror soon. This is the
first stable release for the 3.8.x branch, also available with OpenBSD 7.4

It includes the following changes from LibreSSL 3.8.1

* Portable changes
- Fixed processor detection for CMake targets.
Thanks to @jiegec from github.
- Enabled building oscpcheck with MSVC.
Thanks to @FtZPetruska from github.
- Improve CMake package detection and installation.
Thanks to @mark-groundctl from github.
- Fixed assembly optimizations on x64 Windows targets.
- Allow disabling warnings about WINCRYPT overrides.
- Use system arc4random on FreeBSD 12 and newer.
* Documentation improvements
- Documented the RFC 3779 API.
* Compatibility changes
- Restrict the RFC 3779 code to IPv4 and IPv6. It was not written
to be able to deal with anything else.
- Fixed EVP_CIPHER_CTX_iv_length() to return what was set with
EVP_CTRL_AEAD_SET_IVLEN or one of its aliases.
* Bug fixes
- Fixed EVP_PKEY_get{0,1}_RSA for RSA-PSS.
- Plug a potential memory leak in ASN1_TIME_normalize().
- Avoid memory leak in EVP_CipherInit().
- Redirect EVP_PKEY_get1_* through their get0 siblings.
- Fixed a use of uninitialized in i2r_IPAddrBlocks().
- Rewrote CMS_SignerInfo_{sign,verify}().
- Further cleanup and refactoring in the EC code.
- Allow IP addresses to be specified in a URI.
- Fixed a copy-paste error in ASN1_TIME_compare() that could lead
to two UTCTimes or two GeneralizedTimes incorrectly being compared
as equal.

The LibreSSL project continues improvement of the codebase to reflect modern,
safe programming practices. We welcome feedback and improvements from the
broader community. Thanks to all of the contributors who helped make this
release possible.

- Lighttpd 1.4.72

• Changes from 1.4.71
• [core] save config read from stdin across restart
• [core] warn if daemonize w/o absolute config path
• [mod_dirlisting] send Link w/ external css or js
• [mod_dirlisting] fix missing header/readme (fixes #3211)
• [core] ignore coverity warning
• [core] ignore coverity warning
• [core] reqpool.c:request_set_con()
• [core] request_init_data() minor optim
• [core] request.c:request_pool_{push,pop}
• Revert “[core] h2 http_request_parse_header() tweak”
• [core] enable config conditions on HTTP/2 PRI
• [mod_webdav] extend symlink support (non-standard)
• [mod_extforward] fix extforward.params config opt
• [mod_authn_ldap] fix config auth.require group=… (fixes #3216)
• [core] set CON_STATE_READ_POST for HTTP/2 reqbody
• [core] chunkqueue_read_squash() returns cq->first
• [core] get body from cq at offset in chunk
• [doc] update stbuehler address
• [tests] use sha crypt for fastcgi auth environment tests
• [tests] drop des-crypt and crypt-md5 auth tests - deprecated/not available on various platforms
• [core] code size: xxhash XXH_NO_STREAM
• [core] fdevent_sh_exec()
• [mod_dirlisting] http_dirlist_auto_layout_early_hints()
• [mod_dirlisting] send 103 w/ external css or js
• [mod_dirlisting] json output for //?json
• [mod_dirlisting] include ETag with cached result
• [core] import xxHash v0.8.2
• [tests] move %ENV modifications into forked child
• [mod_ssi] init hctx->wq to init alt cq tempdirs
• [tests] initialize request_st cqs in tests
• [core] chunkqueue_env_tmpdir()
• [core] config_set_defaults() reduce code size
• [tests] use current perl interpreter path for env.PERL in lighttpd.conf
• [mod_deflate] code reuse to create temp file
• [core] skip pwrite() to temp file if 0 len write
• [core] store cq->tempdirs in stack var
• [core] remove tempdirs ptr from struct chunkqueue
• [core] treat upload_temp_file_size=0 as default sz
• [core] hide unused var on _WIN32 compiler warning
• [mod_nss] nspr include prefix portability(attempt)
• [CI] scripts/ci-build.sh arg consistency;add meson
• [CI] remove wolfssl from autobuild; let rest build
• [CI] remove NSS from autobuild; let rest build
• [CI] remove mbedtls from autobuild; let rest build
• [mod_nss] nspr include prefix portability(attempt)
• [CI] ci-build.sh: adjust meson; add pam, maxminddb
• [CI] ci-build.sh: fix typo –with-pam
• [CI] remove maxminddb from autobuild,cmake; let rest build
• [CI] ci-build.sh re-enable additional dependencies
• [core] optimize for non-Range requests
• [core] allow larger number of Ranges if sorted
• [tests] test_http_range.c
• [core] attempt to quiet coverity warning
• [build] packdist.sh now produces .md for www.l.n
• [core] disable keep-alive if HTTP/1.1 CL and TE
• [core] reject empty Content-Length for HTTP/1.x
• [core] reject uppercase in unrecognized HTTP/2 hdr
• [core] warn dynamic mods listed before staticfile
• [core] dev-only internal request state debugging
• [core] short-circuit connection_state_machine_loop
• [core] reset connection-level state at con level
• [core] optim for non-throttle writes
• [core] remove connection_handle_write HTTP/1.x opt
• [core] yield writing large HTTP/1.x on slow device
• [core] tighten h2_process_streams()
• [core] h2_process_streams() simpler loop to retire
• [core] http_response_physical_pathinfo()
• [core] http_response_prepare() tweaks
• [meson] Fix ‘getoption’ meson typo
• [core] use different getxattr() prototype on MacOS
• [mod_deflate] do not compress any 1xx status
• [core] http_response_304(), http_response_412()
• [core] add config option to reject pathinfo
• [core] expand mimetype.assign builtin defaults
• [core] mark some cold routines noinline
• [core] add config opt to send GOAWAY for bad auth
• [core] show_features() show inotify or kqueue
• [core] stat_cache_refresh_entry()
• [core] splaytree: use all 32-bits of hash value
• [core] splaytree: compare keys directly
• [core] splaytree: splaytree_splay_nonnull()
• [core] stat_cache: stat_cache_sptree_ndx()
• [multiple] use splaytree_splay_nonnull()
• [h2] comment struct h2con h2_sid member is unused
• [mod_openssl] disable DH auto if DHParameters set
• [mod_openssl] replace deprecated openssl funcs
• [core] splaytree: splaytree_delete_splayed_node()
• [multiple] use splaytree_delete_splayed_node()
• [core] splaytree: splaytree_insert_splayed()
• [multiple] use splaytree_insert_splayed()
• [core] _WIN32 fs_win32_readlinkUTF8() (#3223)
• [mod_magnet] lighty.c.readlink() (fixes #3223)
• [core] add config option to reject pathinfo
• [mod_dirlisting] send 103 Early Hints only for h2+
• [mod_webdav] reject non-identity Content-Encoding
• [scons] include mod_h2 in static builds (fixes #3224)
• [core] http_request_validate_pseudohdrs comment
• [core] comment out redundant code
• [core] reset addtl state b4 dynamic error handler
• [core] reject Connection hdr in h2 as soon as seen
• [mod_h2] process headers for debug
• [mod_h2] comments and behavior for h2spec tests
• [multiple] mark func __attribute_returns_nonnull__
• [core] expand mimetype.assign builtin defaults
• [core] warn if IPv6 socket not supported
• [mod_simple_vhost,mod_evhost] check host strict
• [mod_simple_vhost,mod_evhost] minor code transform
• [mod_magnet] quiet 32-bit compiler warning

- OpenSSH 9.5p1

 OpenSSH 9.5 was released on 2023-10-04. It is available from the

mirrors listed at https://www.openssh.com/.

OpenSSH is a 100% complete SSH protocol 2.0 implementation and
includes sftp client and server support.

Once again, we would like to thank the OpenSSH community for their
continued support of the project, especially those who contributed
code or patches, reported bugs, tested snapshots or donated to the
project. More information on donations may be found at:
https://www.openssh.com/donations.html

Changes since OpenSSH 9.4
=========================

This release fixes a number of bugs and adds some small features.

Potentially incompatible changes
--------------------------------

 * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
   are very convenient due to their small size. Ed25519 keys are
   specified in RFC 8709 and OpenSSH has supported them since version 6.5
   (January 2014).
    
 * sshd(8): the Subsystem directive now accurately preserves quoting of
   subsystem commands and arguments. This may change behaviour for exotic
   configurations, but the most common subsystem configuration
   (sftp-server) is unlikely to be affected.

New features
------------

 * ssh(1): add keystroke timing obfuscation to the client. This attempts
   to hide inter-keystroke timings by sending interactive traffic at
   fixed intervals (default: every 20ms) when there is only a small
   amount of data being sent. It also sends fake "chaff" keystrokes for
   a random interval after the last real keystroke. These are
   controlled by a new ssh_config ObscureKeystrokeTiming keyword.
    
 * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
   a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
   implement a ping capability. These messages use numbers in the "local
   extensions" number space and are advertised using a "ping@openssh.com"
   ext-info message with a string version number of "0".
    
 * sshd(8): allow override of Subsystem directives in sshd Match blocks.

Bugfixes
--------

 * scp(1): fix scp in SFTP mode recursive upload and download of
   directories that contain symlinks to other directories. In scp mode,
   the links would be followed, but in SFTP mode they were not. bz3611
    
 * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
   sshsig signature files.
    
 * ssh(1): interactive mode for ControlPersist sessions if they
   originally requested a tty.
    
 * sshd(8): make PerSourceMaxStartups first-match-wins
    
 * sshd(8): limit artificial login delay to a reasonable maximum (5s)
   and don't delay at all for the "none" authentication mechanism.cw
    bz3602
    
 * sshd(8): Log errors in kex_exchange_identification() with level
   verbose instead of error to reduce preauth log spam. All of those
   get logged with a more generic error message by sshpkt_fatal().
    
 * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
    
 * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
   multiplexed sessions to ignore SIGINT under some circumstances.

Portability
-----------

 * Avoid clang zero-call-used-regs=all bug on Apple compilers, which
   for some reason have version numbers that do not match the upstream
   clang version numbers. bz#3584

 * Fix configure test for zlib 1.3 and later/development versions. bz3604

Checksums:
==========

 - SHA1 (openssh-9.5.tar.gz) = 8a0bd3a91fac338d97d91817af58df731f6509a3
 - SHA256 (openssh-9.5.tar.gz) = sVMxeM3d6g65qBMktJIofxmK4Ipg9dblKif0VnhPeO0=

 - SHA1 (openssh-9.5p1.tar.gz) = 35c16dcc6e7d0a9465faa241476ef24f76b196cc
 - SHA256 (openssh-9.5p1.tar.gz) = 8Cbnt5un+1QPdRgq+W3IqPHbOV+SK7yfbKYDZyaGCGs=

Please note that the SHA256 signatures are base64 encoded and not
hexadecimal (which is the default for most checksum tools). The PGP
key used to sign the releases is available from the mirror sites:
https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc

Reporting Bugs:
===============

- Please read https://www.openssh.com/report.html
  Security bugs should be reported directly to openssh@openssh.com

• OpenSSH 9.5

OpenSSH 9.5 was released on 2023-10-04. It is available from the
mirrors listed at https://www.openssh.com/.

OpenSSH is a 100% complete SSH protocol 2.0 implementation and
includes sftp client and server support.

Once again, we would like to thank the OpenSSH community for their
continued support of the project, especially those who contributed
code or patches, reported bugs, tested snapshots or donated to the
project. More information on donations may be found at:
https://www.openssh.com/donations.html

Changes since OpenSSH 9.4
=========================

This release fixes a number of bugs and adds some small features.

Potentially incompatible changes
--------------------------------

 * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
   are very convenient due to their small size. Ed25519 keys are
   specified in RFC 8709 and OpenSSH has supported them since version 6.5
   (January 2014).
    
 * sshd(8): the Subsystem directive now accurately preserves quoting of
   subsystem commands and arguments. This may change behaviour for exotic
   configurations, but the most common subsystem configuration
   (sftp-server) is unlikely to be affected.

New features
------------

 * ssh(1): add keystroke timing obfuscation to the client. This attempts
   to hide inter-keystroke timings by sending interactive traffic at
   fixed intervals (default: every 20ms) when there is only a small
   amount of data being sent. It also sends fake "chaff" keystrokes for
   a random interval after the last real keystroke. These are
   controlled by a new ssh_config ObscureKeystrokeTiming keyword.
    
 * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
   a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
   implement a ping capability. These messages use numbers in the "local
   extensions" number space and are advertised using a "ping@openssh.com"
   ext-info message with a string version number of "0".
    
 * sshd(8): allow override of Subsystem directives in sshd Match blocks.

Bugfixes
--------

 * scp(1): fix scp in SFTP mode recursive upload and download of
   directories that contain symlinks to other directories. In scp mode,
   the links would be followed, but in SFTP mode they were not. bz3611
    
 * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
   sshsig signature files.
    
 * ssh(1): interactive mode for ControlPersist sessions if they
   originally requested a tty.
    
 * sshd(8): make PerSourceMaxStartups first-match-wins
    
 * sshd(8): limit artificial login delay to a reasonable maximum (5s)
   and don't delay at all for the "none" authentication mechanism.cw
    bz3602
    
 * sshd(8): Log errors in kex_exchange_identification() with level
   verbose instead of error to reduce preauth log spam. All of those
   get logged with a more generic error message by sshpkt_fatal().
    
 * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
    
 * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
   multiplexed sessions to ignore SIGINT under some circumstances.

Portability
-----------

 * Avoid clang zero-call-used-regs=all bug on Apple compilers, which
   for some reason have version numbers that do not match the upstream
   clang version numbers. bz#3584

 * Fix configure test for zlib 1.3 and later/development versions. bz3604

Checksums:
==========

 - SHA1 (openssh-9.5.tar.gz) = 8a0bd3a91fac338d97d91817af58df731f6509a3
 - SHA256 (openssh-9.5.tar.gz) = sVMxeM3d6g65qBMktJIofxmK4Ipg9dblKif0VnhPeO0=

 - SHA1 (openssh-9.5p1.tar.gz) = 35c16dcc6e7d0a9465faa241476ef24f76b196cc
 - SHA256 (openssh-9.5p1.tar.gz) = 8Cbnt5un+1QPdRgq+W3IqPHbOV+SK7yfbKYDZyaGCGs=

Please note that the SHA256 signatures are base64 encoded and not
hexadecimal (which is the default for most checksum tools). The PGP
key used to sign the releases is available from the mirror sites:
https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc

Reporting Bugs:
===============

- Please read https://www.openssh.com/report.html
  Security bugs should be reported directly to openssh@openssh.com

• OpenSSH 9.5