The full tarballs for 1.8.3p9 are pennmush-1.8.3p9.tar.gz and
pennmush-1.8.3p9.tar.bz2.  The latter was compressed with pbzip2, a
parallel bzip2 implementation that can take advantage of multiple
CPUs/cores to speed up decompression. The file is compatible with
plain bzip2 as well. If you have pbzip2, decompress the tar file with
'pbzip2 -d FILENAME.tar.bz2', and extract it with 'tar xf
FILENAME.tar'. Otherwise, use 'tar xjf FILENAME.tar.bz2' to use bzip2.

The destination directory of the tarballs has changed: Instead of
unpacking into pennmush/, files go into pennmush-1.8.3p9/ so they do
not clobber an existing source tree.

1.8.3-patch09 is the patchfile to apply to existing 1.8.3p8 source
trees. 

Also please note that the old 'patch -p1' invocation has changed to
'patch -p0'.

You can track PennMUSH via subversion, too:

svn checkout svn://svn.pennmush.org/svn/pennmush/1.8.3/tags/p9

If you already have a 1.8.3p8 tree checked out of subversion, update via:
svn merge svn://svn.pennmush.org/svn/pennmush/1.8.3/tags/p8 svn://svn.pennmush.org/svn/pennmush/1.8.3/tags/p9

You can also track up-to-the-minute fixes by checking out
svn://svn.pennmush.org/svn/pennmush/1.8.3/trunk and doing regular svn
updates. Tracking .../branches/devel instead of .../trunk gets you
(Potentially unstable) new features as well as fixes.

SHA1 checksums for the various files are in 1.8.3p9.checksums. There
is not yet a GPG signature for the tar file.