Download OpenSSH 5.0

OpenSSH is an implementation of the ssh protocol. Applications such as telnet and rlogin send data over the network unencrypted, making it easy to read login and other data. By switching to ssh, the data is sent encrypted, so that eavesdropping, connection hijacking and other attacks are no longer possible. The development team has released version 5.0 which follows the previous release very quickly. The developers have patched a vulnerability and announced it as follows:

We apologize for any inconvenience resulting from this release being made so shortly after 4.9. Unfortunately we only learned of the below security issue from the public CVE report. The Debian OpenSSH maintainers responsible for handling the initial report of this bug failed to report it via either the private OpenSSH security contact list or the portable OpenSSH Bugzilla.

Changes since OpenSSH 4.9:

Security:

• CVE-2008-1483: Avoid possible hijacking of X11-forwarded connections by refusing to listen on a port unless all address families bind successfully.