Release notes are available at https://www.openssh.com/txt/release-9.2 OpenSSH 9.2 contains fixes for two security problems and a memory safety problem. The memory safety problem is not believed to be exploitable. These fixes have already been committed to OpenSSH 9.1 in FreeBSD. Some other notable items from the release notes: * ssh(1): add a new EnableEscapeCommandline ssh_config(5) option that controls whether the client-side ~C escape sequence that provides a command-line is available. Among other things, the ~C command-line could be used to add additional port-forwards at runtime. * sshd(8): add support for channel inactivity timeouts via a new sshd_config(5) ChannelTimeout directive. This allows channels that have not seen traffic in a configurable interval to be automatically closed. Different timeouts may be applied to session, X11, agent and TCP forwarding channels. * sshd(8): add a sshd_config UnusedConnectionTimeout option to terminate client connections that have no open channels for a length of time. This complements the ChannelTimeout option above. * sshd(8): add a -V (version) option to sshd like the ssh client has. * scp(1), sftp(1): add a -X option to both scp(1) and sftp(1) to allow control over some SFTP protocol parameters: the copy buffer length and the number of in-flight requests, both of which are used during upload/download. Previously these could be controlled in sftp(1) only. This makes them available in both SFTP protocol clients using the same option character sequence. * ssh-keyscan(1): allow scanning of complete CIDR address ranges, e.g. "ssh-keyscan 192.168.0.0/24". If a CIDR range is passed, then it will be expanded to all possible addresses in the range including the all-0s and all-1s addresses. bz#976 * ssh(1): support dynamic remote port forwarding in escape command-line's -R processing. bz#3499 MFC after: 1 week Sponsored by: The FreeBSD Foundation
56 lines
3.1 KiB
Plaintext
56 lines
3.1 KiB
Plaintext
5317f294d63a876bfc861e19773b1575f96f027d remove libssh from makefiles
|
|
a337e886a49f96701ccbc4832bed086a68abfa85 Makefile changes
|
|
f2c9feb26963615c4fece921906cf72e248b61ee more Makefile
|
|
fa728823ba21c4b45212750e1d3a4b2086fd1a62 more Makefile refactoring
|
|
1de0e85522051eb2ffa00437e1885e9d7b3e0c2e moduli update
|
|
814b2f670df75759e1581ecef530980b2b3d7e0f remove redundant make defs
|
|
04431e8e7872f49a2129bf080a6b73c19d576d40 moduli update
|
|
c07772f58028fda683ee6abd41c73da3ff70d403 moduli update
|
|
db6375fc302e3bdf07d96430c63c991b2c2bd3ff moduli update
|
|
5ea3d63ab972691f43e9087ab5fd8376d48e898f uuencode.c Makefile accident
|
|
99dd10e72c04e93849981d43d64c946619efa474 include sshbuf-misc.c
|
|
9e1c23476bb845f3cf3d15d9032da3ed0cb2fcf5 sshbuf-misc.c in regress
|
|
569f08445c27124ec7c7f6c0268d844ec56ac061 Makefile tweaks for !openssl
|
|
58ec755be4e51978ecfee73539090eb68652a987 moduli update
|
|
4bd5551b306df55379afe17d841207990eb773bf Makefile.inc
|
|
14806a59353152f843eb349e618abbf6f4dd3ada Makefile.inc
|
|
8ea4455a2d9364a0a04f9e4a2cbfa4c9fcefe77e Makefile.inc
|
|
d9b910e412d139141b072a905e66714870c38ac0 Makefile.inc
|
|
7b7b619c1452a459310b0cf4391c5757c6bdbc0f moduli update
|
|
5010ff08f7ad92082e87dde098b20f5c24921a8f moduli regen script update
|
|
3bcae7a754db3fc5ad3cab63dd46774edb35b8ae moduli regen script update
|
|
52ff0e3205036147b2499889353ac082e505ea54 moduli update
|
|
07b5031e9f49f2b69ac5e85b8da4fc9e393992a0 Makefile.inc
|
|
cc12a9029833d222043aecd252d654965c351a69 moduli-gen Makefile
|
|
7ac6c252d2a5be8fbad4c66d9d35db507c9dac5b moduli update
|
|
6b52cd2b637f3d29ef543f0ce532a2bce6d86af5 makefile change
|
|
f9a0726d957cf10692a231996a1f34e7f9cdfeb0 moduli update
|
|
1e0a2692b7e20b126dda60bf04999d1d30d959d8 sshd relinking makefile changes
|
|
e1dc11143f83082e3154d6094f9136d0dc2637ad more relinking makefile tweaks
|
|
|
|
Old upstream tree:
|
|
|
|
321065a95a7ccebdd5fd08482a1e19afbf524e35 Update DH groups
|
|
d4f699a421504df35254cf1c6f1a7c304fb907ca Remove 1k bit groups
|
|
aafe246655b53b52bc32c8a24002bc262f4230f7 Remove intermediate moduli
|
|
8fa9cd1dee3c3339ae329cf20fb591db6d605120 put back SSH1 for 6.9
|
|
f31327a48dd4103333cc53315ec53fe65ed8a17a Generate new moduli
|
|
edbfde98c40007b7752a4ac106095e060c25c1ef Regen moduli
|
|
052fd565e3ff2d8cec3bc957d1788f50c827f8e2 Switch to tame-based sandbox
|
|
7cf73737f357492776223da1c09179fa6ba74660 Remove moduli <2k
|
|
180d84674be1344e45a63990d60349988187c1ae Update moduli
|
|
f6ae971186ba68d066cd102e57d5b0b2c211a5ee systrace is dead.
|
|
96c5054e3e1f170c6276902d5bc65bb3b87a2603 remove DEBUGLIBS from Makefile
|
|
6da9a37f74aef9f9cc639004345ad893cad582d8 Update moduli file
|
|
77bcb50e47b68c7209c7f0a5a020d73761e5143b unset REGRESS_FAIL_EARLY
|
|
38c2133817cbcae75c88c63599ac54228f0fa384 Change COMPILER_VERSION tests
|
|
30c20180c87cbc99fa1020489fe7fd8245b6420c resync integrity.sh shell
|
|
1e6b51ddf767cbad0a4e63eb08026c127e654308 integrity.sh reliability
|
|
fe5b31f69a60d47171836911f144acff77810217 Makefile.inc bits
|
|
5781670c0578fe89663c9085ed3ba477cf7e7913 Delete sshconnect1.c
|
|
ea80f445e819719ccdcb237022cacfac990fdc5c Makefile.inc warning flags
|
|
b92c93266d8234d493857bb822260dacf4366157 moduli-gen.sh tweak
|
|
b25bf747544265b39af74fe0716dc8d9f5b63b95 Updated moduli
|
|
1bd41cba06a7752de4df304305a8153ebfb6b0ac rsa.[ch] already removed
|
|
e39b3902fe1d6c4a7ba6a3c58e072219f3c1e604 Makefile changes
|