DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 59LGtGf0938510
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 59LGtGf0938510
Authentication-Results: delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=EhRQBFDl
X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 9921F3858416
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1761065714;
	bh=MszRGFMl61k07AKdzHDdVn19JzQOQR29cSDOaDPcSHk=;
	h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:
	 List-Help:List-Subscribe:From:Reply-To:From;
	b=EhRQBFDl2HazroyxtATXSqN1YNpCFpIOG0Tlz/XZVFzstp/gT6KsNkcE/kssiqRmY
	 Ny9vl6Wfwih56EXFTkgoZr3astnNCrXKftdasMRfQ8ApB7+yAKuVv/RoPhhOziG1sQ
	 QJwXWz93RzJTbZ1QKbGM1C4HRXPWyqMiNgSTKRgc=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org AA4A83858C2C
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org AA4A83858C2C
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1761065652; cv=none;
 b=kZX4y5it7giVm6IlIZPHNav8j0l/Xwe5GympQ3PLigeQ4sQQnoBm9+4Hnm8Yb4grnkmjV3UN6+D4LtvPP/tlr0WTpbnWX36/Q1GlSihMgERkW6yusuh/uhrqhSehg+kYcdZVQ6KUIJD7DyODcJuo2D1PFEQM8WMXdNb8T5dXwL0=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1761065652; c=relaxed/simple;
 bh=PAsLxABbKM0nYsBdt85U7RKEW/j0gqYLSJHLqoYhbfo=;
 h=DKIM-Signature:MIME-Version:From:Date:Message-ID:Subject:To;
 b=nvLlOoCevPS1BWbWl/SpI8B4HvvUljNK0asySoUiQslBNukK5UqFWaxZNLmQ1e1JKlhQj+HbJF1fCDyT6j/7J+luliSg/ALfVE5BPGTlHbmOjzQuQTXRxeeCHQdse8EQKemY3ENgXm0Y868z8BUMVkmsyYsqtWKcMtXQ54BSCxQ=
ARC-Authentication-Results: i=1; server2.sourceware.org
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org AA4A83858C2C
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1761065652; x=1761670452;
 h=to:subject:message-id:date:from:mime-version:x-gm-message-state
 :from:to:cc:subject:date:message-id:reply-to;
 bh=PAsLxABbKM0nYsBdt85U7RKEW/j0gqYLSJHLqoYhbfo=;
 b=g5tszB5ib4H3hwecWmOixjDYkdz1h9FquOagaNkiJL/lloSnVame2lD1iEoWpvF+U0
 8qsR+gyGt7RK+h9qs6g66/36GzOVpZswmmsMaNCRLLOguJsUQLOXmVl2kvo6+c7HWtas
 e60Dfu/y0JV4jEiPlpxaWyNNcrl6O5bubqzX6x266iAPnZbDo+wMZ3DRo9yIl/QNc9uw
 GzcJFTZ+MUUr6jHP1FsYMxdW2sWY2Fz8Ump1wyFnqiHuzkbgDAixmbQAEkkukx/o5/UE
 OCF01PwxIr6xFwnVyIbeDwMSZU9r8aDmx0M8WdgqPhAXPZrxBZUeh39uEtJphqzapaQN
 SPpg==
X-Gm-Message-State: AOJu0YywKUs6rCVExS01o1ZLRkxk9jUzsbR96l9PMl8l98XHk39+Z8cn
 stlBvea5SLsVcP/zD+C2cKI/bqY5/9M3Ir/Lvqx/kNiBchKiGqpNY+p7lwWgVrq6Y0MU7yzruiS
 onAC79K0nsHdGYcRBMXjZo0aIokNoy8X2RGG7
X-Gm-Gg: ASbGncvkg92wEUphVDYCw3XaG0gXCtrr5Bd5s+EKOybP2Ur7ReknGVJMXIoIAXYF1zF
 53JV2oULgyZf8XR4MSw3PaNi9RDQUmtrQ0ZHv/0KmqpGFOVJ+vG1P/RR0ti+EOruDg1JJK5hKNB
 NLU75k6vY0TJOwcw6z5PGmzOrVTO+ucRWOkcdzuQK3Vz6E2sRjdC14ZXVccXkWno8aqYFvpLGVT
 PpTdrcmUCbXWMuUf7Jjd8yeIO8bbimPh/fgIdP11z/P8tfrUI8vH1VF6rHO
X-Google-Smtp-Source: AGHT+IGgkNPKo2BBPEcosv0frgN1bIdQA/SSBu6w/2EdcJck8lgNIUcQzn9qQYAmHbm+BFpWVoAhcSrjmt757qxDKjU=
X-Received: by 2002:a17:902:ecc1:b0:290:ccf0:7692 with SMTP id
 d9443c01a7336-290ccf076aemr223552565ad.33.1761065651571; Tue, 21 Oct 2025
 09:54:11 -0700 (PDT)
MIME-Version: 1.0
Date: Tue, 21 Oct 2025 09:54:00 -0700
X-Gm-Features: AS18NWBa9AHa1WRsVtMDZ0C-ZhSqR6QFz90-eCoJVUaYHnjufta_5LY-g3eMMUA
Message-ID: <CAFJH02UFcn-vdBm_wMEAZ8T6BDQR0bxAxGAGX+9RWVOAjT9sDQ@mail.gmail.com>
Subject: OpenSSH update
To: "cygwin AT cygwin DOT com" <cygwin AT cygwin DOT com>
X-Content-Filtered-By: Mailman/MimeDel 2.1.30
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Ted Summers via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Ted Summers <djtbs1 AT gmail DOT com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

The current openssh in CygWin is

openssh-10.0p1-1
<https://www.cygwin.com/cgit/cygwin-packages/openssh/commit/?id=4827e8b237c1ce043f9e76fc65105e50d654d32c>
<https://www.cygwin.com/cgit/cygwin-packages/openssh/commit/?id=4827e8b237c1ce043f9e76fc65105e50d654d32c>
There is a vulnerability, though considered "low":
Tenable Plugin ID 269984 (CVE-2025-61984)

I see on openssh.com there is this note:

OpenSSH 10.2 was released on 2025-10-10

Is a patch / update for openssh build in CygWin scheduled?

Look forward to any update or guidance.

Best Regards,
Ted

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple