OpenSSH 3.3 has just been released. It will be available from the
mirrors listed at http://www.openssh.com/ shortly.OpenSSH is a 100% complete SSH protocol version 1.3, 1.5 and 2.0
implementation and includes sftp client and server support.We would like to thank the OpenSSH community for their continued
support and encouragement.Changes since OpenSSH 3.2.3:
============================Security Changes:
=================- improved support for privilege separation:
privilege separation is now enabled by default
See UsePrivilegeSeparation in sshd_config(5)
and http://www.citi.umich.edu/u/provos/ssh/privsep.html for more
information.
- ssh no longer needs to be installed setuid root for protocol
version 2 hostbased authentication, see ssh-keysign(8).
protocol version 1 rhosts-rsa authentication still requires privileges
and is not recommended.Other Changes:
==============- documentation for the client and server configuration options have
been moved to ssh_config(5) and sshd_config(5).
- the server now supports the Compression option, see sshd_config(5).
- the client options RhostsRSAAuthentication and RhostsAuthentication now
default to no, see ssh_config(5).
- the client options FallBackToRsh and UseRsh are deprecated.
- ssh-agent now supports locking and timeouts for keys, see ssh-add(1).
- ssh-agent can now bind to unix-domain sockets given on the command line,
see ssh-agent(1).
- fixes problems with valid RSA signatures from putty clients.Reporting Bugs:
===============- please read http://www.openssh.com/report.html
and http://bugzilla.mindrot.org/OpenSSH is brought to you by Markus Friedl, Niels Provos, Theo de Raadt,
Kevin Steves, Damien Miller and Ben Lindstrom.
| david | Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3 |
| Greg Kroah-Hartman | [PATCH 009/196] Chinese: add translation of sparse.txt |
| Andrew Morton | Re: -mm merge plans for 2.6.23 -- sys_fallocate |
| Stephen Rothwell | Announce: Linux-next (Or Andrew's dream :-)) |
git: | |
| Gerrit Renker | [PATCH 15/37] dccp: Set per-connection CCIDs via socket options |
| David Miller | [GIT]: Networking |
| David Miller | Re: [PATCH] pkt_sched: Destroy gen estimators under rtnl_lock(). |
| Wenji Wu | A Linux TCP SACK Question |
