SSH 4.0 was released for download yesterday but there was an issue

The release announcement for OpenSSH 4.0p1 had an incorrect md5sum for the
portable tarball. The correct md5 is below, otherwise you may verify the
integrity of the release using the PGP signature, contained in the file
"openssh-4.0p1.tar.gz.sig" in the release directory.

MD5 (openssh-4.0p1.tar.gz) = 7b36f28fc16e1b7f4ba3c1dca191ac92

Apologies for any confusion,
If anyone uses this it is suggested that you update.

The site to download the new version is here

-cheers-