mirror of
https://github.com/freebsd/freebsd-src
synced 2024-10-15 04:43:53 +00:00
38a52bd3b5
Release notes are available at https://www.openssh.com/txt/release-9.1 9.1 contains fixes for three minor memory safety problems; these have lready been merged to the copy of OpenSSH 9.0 that is in the FreeBSD base system. Some highlights copied from the release notes: Potentially-incompatible changes -------------------------------- * ssh(1), sshd(8): SetEnv directives in ssh_config and sshd_config are now first-match-wins to match other directives. Previously if an environment variable was multiply specified the last set value would have been used. bz3438 * ssh-keygen(8): ssh-keygen -A (generate all default host key types) will no longer generate DSA keys, as these are insecure and have not been used by default for some years. New features ------------ * ssh(1), sshd(8): add a RequiredRSASize directive to set a minimum RSA key length. Keys below this length will be ignored for user authentication and for host authentication in sshd(8). * sftp-server(8): add a "users-groups-by-id@openssh.com" extension request that allows the client to obtain user/group names that correspond to a set of uids/gids. * sftp(1): use "users-groups-by-id@openssh.com" sftp-server extension (when available) to fill in user/group names for directory listings. * sftp-server(8): support the "home-directory" extension request defined in draft-ietf-secsh-filexfer-extensions-00. This overlaps a bit with the existing "expand-path@openssh.com", but some other clients support it. * ssh-keygen(1), sshd(8): allow certificate validity intervals, sshsig verification times and authorized_keys expiry-time options to accept dates in the UTC time zone in addition to the default of interpreting them in the system time zone. YYYYMMDD and YYMMDDHHMM[SS] dates/times will be interpreted as UTC if suffixed with a 'Z' character. Also allow certificate validity intervals to be specified in raw seconds-since-epoch as hex value, e.g. -V 0x1234:0x4567890. This is intended for use by regress tests and other tools that call ssh-keygen as part of a CA workflow. bz3468 * sftp(1): allow arguments to the sftp -D option, e.g. sftp -D "/usr/libexec/sftp-server -el debug3" * ssh-keygen(1): allow the existing -U (use agent) flag to work with "-Y sign" operations, where it will be interpreted to require that the private keys is hosted in an agent; bz3429 MFC after: 2 weeks Relnotes: Yes Sponsored by: The FreeBSD Foundation |
||
---|---|---|
.. | ||
regress | ||
arc4random.c | ||
arc4random.h | ||
arc4random_uniform.c | ||
base64.c | ||
base64.h | ||
basename.c | ||
bcrypt_pbkdf.c | ||
bindresvport.c | ||
blf.h | ||
blowfish.c | ||
bsd-asprintf.c | ||
bsd-closefrom.c | ||
bsd-cygwin_util.c | ||
bsd-cygwin_util.h | ||
bsd-err.c | ||
bsd-flock.c | ||
bsd-getentropy.c | ||
bsd-getline.c | ||
bsd-getpagesize.c | ||
bsd-getpeereid.c | ||
bsd-malloc.c | ||
bsd-misc.c | ||
bsd-misc.h | ||
bsd-nextstep.c | ||
bsd-nextstep.h | ||
bsd-openpty.c | ||
bsd-poll.c | ||
bsd-poll.h | ||
bsd-pselect.c | ||
bsd-setres_id.c | ||
bsd-setres_id.h | ||
bsd-signal.c | ||
bsd-signal.h | ||
bsd-snprintf.c | ||
bsd-statvfs.c | ||
bsd-statvfs.h | ||
bsd-timegm.c | ||
bsd-waitpid.c | ||
bsd-waitpid.h | ||
chacha_private.h | ||
charclass.h | ||
daemon.c | ||
dirname.c | ||
explicit_bzero.c | ||
fake-rfc2553.c | ||
fake-rfc2553.h | ||
fmt_scaled.c | ||
fnmatch.c | ||
fnmatch.h | ||
freezero.c | ||
getcwd.c | ||
getgrouplist.c | ||
getopt.h | ||
getopt_long.c | ||
getrrsetbyname-ldns.c | ||
getrrsetbyname.c | ||
getrrsetbyname.h | ||
glob.c | ||
glob.h | ||
inet_aton.c | ||
inet_ntoa.c | ||
inet_ntop.c | ||
kludge-fd_set.c | ||
libressl-api-compat.c | ||
Makefile.in | ||
md5.c | ||
md5.h | ||
memmem.c | ||
mktemp.c | ||
openbsd-compat.h | ||
openssl-compat.c | ||
openssl-compat.h | ||
port-aix.c | ||
port-aix.h | ||
port-irix.c | ||
port-irix.h | ||
port-linux.c | ||
port-linux.h | ||
port-net.c | ||
port-net.h | ||
port-prngd.c | ||
port-solaris.c | ||
port-solaris.h | ||
port-uw.c | ||
port-uw.h | ||
pwcache.c | ||
readpassphrase.c | ||
readpassphrase.h | ||
reallocarray.c | ||
recallocarray.c | ||
rresvport.c | ||
setenv.c | ||
setproctitle.c | ||
sha1.c | ||
sha1.h | ||
sha2.c | ||
sha2.h | ||
sigact.c | ||
sigact.h | ||
strcasestr.c | ||
strlcat.c | ||
strlcpy.c | ||
strmode.c | ||
strndup.c | ||
strnlen.c | ||
strptime.c | ||
strsep.c | ||
strtoll.c | ||
strtonum.c | ||
strtoul.c | ||
strtoull.c | ||
sys-queue.h | ||
sys-tree.h | ||
timingsafe_bcmp.c | ||
vis.c | ||
vis.h | ||
xcrypt.c |