Untrusted X11 forwarding is now prevented from
using a trusted authentication cookie in certain
situations. The SSH protocol 2 is used by default
for new installations. Performance for high-BDP
links was improved. Cryptographic speedups and a
new, faster MAC algorithm were added. Many bugs
were fixed.
sshd now allows the enabling and disabling of
authentication methods on a per user, group, host,
and network basis via the Match directive in
sshd_config. A number of non-security bugs were
fixed, including a hang on exit for ttyful/login
sessions.
This release adds important security fixes.
Support for Diffie-Hellman
with SHA256 has been added. Several features have
been added to
sshd_config, including support for conditional
directives, forcing use
of a specified command, and restrictions on port
forwarding. Optional
logging has been added to sftp-server. The client
may exit if any
requested port forwarding cannot be established,
and will record any
non-standard ports in the known_hosts file.
Support for SELinux, Solaris
process contracts, and OpenSSL hardware engines
can be built in. Various
other bugs have been fixed and features added.
This is a bugfix release to resolve problems
caused by a bug in the autoconf script that caused
logout records to be incorrectly recorded on some
systems.
