1 files changed, 12 insertions, 0 deletions

diff --git a/debian/openssh-server.NEWS b/debian/openssh-server.NEWS
new file mode 100644
index 000000000..687adf955
--- /dev/null
+++ b/debian/openssh-server.NEWS
@@ -0,0 +1,12 @@
+ssh (1:3.5p1-1) unstable; urgency=low
+
+  This version of OpenSSH disables the environment option for public keys by
+  default, in order to avoid certain attacks (for example, LD_PRELOAD). If
+  you are using this option in an authorized_keys file, beware that the keys
+  in question will no longer work until the option is removed.
+
+  To re-enable this option, set "PermitUserEnvironment yes" in
+  /etc/ssh/sshd_config after the upgrade is complete, taking note of the
+  warning in the sshd_config(5) manual page.
+
+ -- Colin Watson <cjwatson@debian.org>  Sat, 26 Oct 2002 19:41:51 +0100