DMARC-Filter:	OpenDMARC Filter v1.4.2 delorie.com 59LGtGf0938510
Authentication-Results:	delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results:	delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter:	OpenDKIM Filter v2.11.0 delorie.com 59LGtGf0938510
Authentication-Results:	delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=EhRQBFDl
X-Recipient:	archive-cygwin AT delorie DOT com
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org 9921F3858416
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1761065714;
	bh=MszRGFMl61k07AKdzHDdVn19JzQOQR29cSDOaDPcSHk=;
	h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:
	List-Help:List-Subscribe:From:Reply-To:From;
	b=EhRQBFDl2HazroyxtATXSqN1YNpCFpIOG0Tlz/XZVFzstp/gT6KsNkcE/kssiqRmY
	Ny9vl6Wfwih56EXFTkgoZr3astnNCrXKftdasMRfQ8ApB7+yAKuVv/RoPhhOziG1sQ
	QJwXWz93RzJTbZ1QKbGM1C4HRXPWyqMiNgSTKRgc=
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.2 sourceware.org AA4A83858C2C
ARC-Filter:	OpenARC Filter v1.0.0 sourceware.org AA4A83858C2C
ARC-Seal:	i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1761065652; cv=none;
	b=kZX4y5it7giVm6IlIZPHNav8j0l/Xwe5GympQ3PLigeQ4sQQnoBm9+4Hnm8Yb4grnkmjV3UN6+D4LtvPP/tlr0WTpbnWX36/Q1GlSihMgERkW6yusuh/uhrqhSehg+kYcdZVQ6KUIJD7DyODcJuo2D1PFEQM8WMXdNb8T5dXwL0=
ARC-Message-Signature:	i=1; a=rsa-sha256; d=sourceware.org; s=key;
	t=1761065652; c=relaxed/simple;
	bh=PAsLxABbKM0nYsBdt85U7RKEW/j0gqYLSJHLqoYhbfo=;
	h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To;
	b=nvLlOoCevPS1BWbWl/SpI8B4HvvUljNK0asySoUiQslBNukK5UqFWaxZNLmQ1e1JKlhQj+HbJF1fCDyT6j/7J+luliSg/ALfVE5BPGTlHbmOjzQuQTXRxeeCHQdse8EQKemY3ENgXm0Y868z8BUMVkmsyYsqtWKcMtXQ54BSCxQ=
ARC-Authentication-Results:	i=1; server2.sourceware.org
DKIM-Filter:	OpenDKIM Filter v2.11.0 sourceware.org AA4A83858C2C
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20230601; t=1761065652; x=1761670452;
	h=to:subject:message-id:date:from:mime-version:x-gm-message-state
	:from:to:cc:subject:date:message-id:reply-to;
	bh=PAsLxABbKM0nYsBdt85U7RKEW/j0gqYLSJHLqoYhbfo=;
	b=g5tszB5ib4H3hwecWmOixjDYkdz1h9FquOagaNkiJL/lloSnVame2lD1iEoWpvF+U0
	8qsR+gyGt7RK+h9qs6g66/36GzOVpZswmmsMaNCRLLOguJsUQLOXmVl2kvo6+c7HWtas
	e60Dfu/y0JV4jEiPlpxaWyNNcrl6O5bubqzX6x266iAPnZbDo+wMZ3DRo9yIl/QNc9uw
	GzcJFTZ+MUUr6jHP1FsYMxdW2sWY2Fz8Ump1wyFnqiHuzkbgDAixmbQAEkkukx/o5/UE
	OCF01PwxIr6xFwnVyIbeDwMSZU9r8aDmx0M8WdgqPhAXPZrxBZUeh39uEtJphqzapaQN
	SPpg==
X-Gm-Message-State:	AOJu0YywKUs6rCVExS01o1ZLRkxk9jUzsbR96l9PMl8l98XHk39+Z8cn
	stlBvea5SLsVcP/zD+C2cKI/bqY5/9M3Ir/Lvqx/kNiBchKiGqpNY+p7lwWgVrq6Y0MU7yzruiS
	onAC79K0nsHdGYcRBMXjZo0aIokNoy8X2RGG7
X-Gm-Gg:	ASbGncvkg92wEUphVDYCw3XaG0gXCtrr5Bd5s+EKOybP2Ur7ReknGVJMXIoIAXYF1zF
	53JV2oULgyZf8XR4MSw3PaNi9RDQUmtrQ0ZHv/0KmqpGFOVJ+vG1P/RR0ti+EOruDg1JJK5hKNB
	NLU75k6vY0TJOwcw6z5PGmzOrVTO+ucRWOkcdzuQK3Vz6E2sRjdC14ZXVccXkWno8aqYFvpLGVT
	PpTdrcmUCbXWMuUf7Jjd8yeIO8bbimPh/fgIdP11z/P8tfrUI8vH1VF6rHO
X-Google-Smtp-Source:	AGHT+IGgkNPKo2BBPEcosv0frgN1bIdQA/SSBu6w/2EdcJck8lgNIUcQzn9qQYAmHbm+BFpWVoAhcSrjmt757qxDKjU=
X-Received:	by 2002:a17:902:ecc1:b0:290:ccf0:7692 with SMTP id
	d9443c01a7336-290ccf076aemr223552565ad.33.1761065651571; Tue, 21 Oct 2025
	09:54:11 -0700 (PDT)
MIME-Version:	1.0
Date:	Tue, 21 Oct 2025 09:54:00 -0700
X-Gm-Features:	AS18NWBa9AHa1WRsVtMDZ0C-ZhSqR6QFz90-eCoJVUaYHnjufta_5LY-g3eMMUA
Message-ID:	<CAFJH02UFcn-vdBm_wMEAZ8T6BDQR0bxAxGAGX+9RWVOAjT9sDQ@mail.gmail.com>
Subject:	OpenSSH update
To:	"cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
X-Content-Filtered-By:	Mailman/MimeDel 2.1.30
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.30
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From:	Ted Summers via Cygwin <cygwin AT cygwin DOT com>
Reply-To:	Ted Summers <djtbs1 AT gmail DOT com>
Sender:	"Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

The current openssh in CygWin is

openssh-10.0p1-1
<https://www.cygwin.com/cgit/cygwin-packages/openssh/commit/?id=4827e8b237c1ce043f9e76fc65105e50d654d32c>
<https://www.cygwin.com/cgit/cygwin-packages/openssh/commit/?id=4827e8b237c1ce043f9e76fc65105e50d654d32c>
There is a vulnerability, though considered "low":
Tenable Plugin ID 269984 (CVE-2025-61984)

I see on openssh.com there is this note:

OpenSSH 10.2 was released on 2025-10-10

Is a patch / update for openssh build in CygWin scheduled?

Look forward to any update or guidance.

Best Regards,
Ted

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -