www/43.html - diff

Return to 43.html CVS log

Up to [local] / www

Diff for /www/43.html between version 1.101 and 1.102

version 1.101, 2019/05/27 22:55:18

version 1.102, 2019/05/31 13:15:31

Line 294

"ChrootDirectory". Please refer to

<a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>

for details, and

please use this feature carefully.</li>

please use this feature carefully.

<li>Linked

<a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a>

into

Line 304

internal sftp server requires no special configuration of files

inside the chroot environment. Please refer to

<a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>

for more information.</li>

for more information.

<li>Added a protocol extension method "posix-rename@openssh.com" for

<a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a>

to perform POSIX atomic rename() operations.</li>

to perform POSIX atomic rename() operations.

<li>Removed the fixed limit of 100 file handles in

<a href="https://man.openbsd.org/sftp-server.8">sftp-server(8)</a>.

The server will now dynamically allocate handles up to the number of

available file descriptors.</li>

available file descriptors.

will now skip generation of SSH protocol 1 ephemeral server

keys when in inetd mode and protocol 2 connections are negotiated.

This speeds up protocol 2 connections to inetd-mode servers that

also allow Protocol 1.</li>

also allow Protocol 1.

<li>Accept the PermitRootLogin directive in a

<a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>

Match

block. Allows for, e.g. permitting root only from the local

network.</li>

network.

<li>Reworked

argument splitting and escaping to be more

Line 330

<a href="https://man.openbsd.org/sh.1">sh(1)</a>.

Please note that this will change the

interpretation of some quoted strings, especially those with

embedded backslash escape sequences.</li>

embedded backslash escape sequences.

<li>Support "Banner=none" in

<a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>

to disable sending of a

pre-login banner (e.g. in a Match block).</li>

pre-login banner (e.g. in a Match block).

ProxyCommands are now executed with $SHELL rather than

/bin/sh.</li>

/bin/sh.

ConnectTimeout option is now applied to both the TCP

connection and the SSH banner exchange (previously it just covered

Line 346

to better detect

and deal with stuck servers that accept a TCP connection but don't

progress the protocol, and also makes ConnectTimeout useful for

connections via a ProxyCommand.</li>

connections via a ProxyCommand.

<li>Many new regression tests, including interop tests against PuTTY's

plink.</li>

plink.

</ul></li>

</ul>

<li>The following significant bugs have been fixed in this release:

<ul>

<li>SSH2_MSG_UNIMPLEMENTED packets did not correctly reset the client

keepalive logic, causing disconnections on servers that did not

explicitly implement "keepalive@openssh.com".</li>

explicitly implement "keepalive@openssh.com".

used the obsolete SIG DNS RRtype for host keys in DNS,

instead of the current standard RRSIG.</li>

instead of the current standard RRSIG.

<li>Correctly drain ACKs when a

upload write fails midway,

avoids a fatal() exit from what should be a recoverable condition.</li>

avoids a fatal() exit from what should be a recoverable condition.

<li>Fixed packet size advertisements. Previously TCP and agent

forwarding incorrectly advertised the channel window size as the

packet size, causing fatal errors under some conditions.</li>

packet size, causing fatal errors under some conditions.

<li>Many more bugfixes. Please refer to the

<a href="https://www.openssh.com/txt/release-4.8">Release Notes</a>.

</li>

</ul></li>

</ul>