===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/50.html,v
retrieving revision 1.4
retrieving revision 1.5
diff -c -r1.4 -r1.5
*** www/50.html	2011/10/30 16:24:42	1.4
--- www/50.html	2011/10/31 22:14:10	1.5
***************
*** 236,274 ****
      </ul>
  <p>
  
! <li>OpenSSH 6.0:
      <ul>
      <li>New features:
        <ul>
!       <li>Allow cancellation of port forwardings via the multiplexing socket
!         (e.g. "ssh -O cancel -R 2222:127.0.0.1:22 user@host")
!       <li>Add wildcard support to PermitOpen (e.g. "PermitOpen localhost:*")
!       <li>A new "ssh-add -k" option to load only plain keys and not
!         certificates into the agent.
!       <li>ssh-add now supports loading keys from stdin ("program | ssh-add -")
!       <li>Allow graceful shutdown of the multiplexing socket (stop listening,
!         but don't interrupt existing connections), using "ssh -O stop".
!       <li>"ssh-keygen -A" will now automatically generate host keys of every
!         supported type
!       <li>Deprecated GlobalKnownHostsFile2, UserKnownHostsFile2 and
!         AuthorizedKeysFile2 options.  Instead, the corresponding
!         GlobalKnownHostsFile UserKnownHostsFile and AuthorizedKeysFile
!         options now all accept multiple arguments.
!       <li>Add a RequestTTY option to ssh(1) to allow control over TTY
!         requests similar to the -t/-tt/-T commandline options.
!       <li>ssh_config(5) now supports negated host matching. E.g.
!         "Host *.example.org !c.example.org" will match "a.example.org",
!         "b.example.org", but not "c.example.org"
!       <li>Add experimental systrace(4) sandboxing of pre-auth sshd(8),
!         enabled using "UsePrivilegeSeparation=sandbox".
!       <li>Add new SHA-2 based HMAC modes for the SSH transport layer from
!         http://tools.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt
        </ul>
      <li>The following significant bugs have been fixed in this release:
        <ul>
!       <li>Fix hostbased authentication for hosts using ECDSA keys.
!       <li>Fix corruption of file information in sftp(1)'s ls display.
!       <li>Fix remote portforwarding with dynamically allocated listen ports.
        </ul>
      </ul>
  <p>
--- 236,318 ----
      </ul>
  <p>
  
! <li>OpenSSH 5.9:
      <ul>
      <li>New features:
        <ul>
!       <li>Introduce sandboxing of the pre-auth privsep child using an optional
!         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>
!         "UsePrivilegeSeparation=sandbox" mode that enables mandatory
!         restrictions on the syscalls the privsep child can perform.
!       <li>Add new SHA256-based HMAC transport integrity modes from
!         http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt
!         These modes are hmac-sha2-256, hmac-sha2-256-96, hmac-sha2-512,
!         and hmac-sha2-512-96, and are available by default in
!         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
!         and
!         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
!       <li>The pre-authentication
!         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
!         privilege separation slave process now logs via a socket shared with
!         the master process, avoiding the need to maintain /dev/log inside the
!         chroot.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
!         now warns when a server refuses X11 forwarding.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>'s
!         AuthorizedKeysFile now accepts multiple paths, separated by whitespace.
!         The undocumented AuthorizedKeysFile2 option is deprecated (though the
!         default for AuthorizedKeysFile includes .ssh/authorized_keys2).
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>:
!         similarly deprecate UserKnownHostsFile2 and GlobalKnownHostsFile2 by
!         making UserKnownHostsFile and GlobalKnownHostsFile accept multiple
!         options and default to include known_hosts2.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>'s
!         ControlPath option now expands %L to the host portion of the
!         destination host name.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>
!         "Host" options now support negated Host matching.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>:
!         a new RequestTTY option provides control over when a TTY is requested
!         for a connection, similar to the existing -t/-tt/-T
!         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
!         commandline options.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:
!         Add -A option. For each of the key types (rsa1, rsa, dsa and ecdsa) for
!         which host keys do not exist, generate the host keys with the default
!         key file path, an empty passphrase, default bits for the key type, and
!         default comment. This is useful for system initialisation scripts.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:
!         Allow graceful shutdown of multiplexing: request that a mux server
!         removes its listener socket and refuse future multiplexing requests but
!         don't kill existing connections. This may be requested using
!         "ssh -O stop ...".
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&sektion=1">ssh-add(1)</a>:
!         now accepts keys piped from standard input.
        </ul>
      <li>The following significant bugs have been fixed in this release:
        <ul>
!       <li>Retain key comments when loading v.2 keys. These will be visible in
!         "ssh-add -l" and other places. (bz#439)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
!         and
!         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:
!         set IPv6 traffic class from IPQoS (as well as IPv4 ToS/DSCP). (bz#1855)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>:
!         allow GSSAPI authentication to detect when a server-side failure causes
!         authentication failure and don't count such failures against
!         MaxAuthTries. (bz#1244)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keysign&sektion=8">ssh-keysign(8)</a>:
!         now signs hostbased authentication challenges correctly using ECDSA
!         keys. (bz#1858)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>:
!         document that sftp accepts square brackets to delimit addresses
!         (useful for IPv6). (bz#1847a)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>:
!         when using session multiplexing, the master process will change its
!         process title to reflect the control path in use and when a
!         ControlPersist-ed master is waiting to close. (bz#1883 and bz#1911)
!       <li>Other minor bugs fixed: (bz#1849, bz#1861, bz#1862, bz#1869, bz#1875,
!         bz#1878, bz#1879, bz#1892, bz#1900, bz#1905, and bz#1913)
        </ul>
      </ul>
  <p>
***************
*** 725,731 ****
  alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br><small>
! $OpenBSD: 50.html,v 1.4 2011/10/30 16:24:42 nick Exp $
  </small>
  
  </body>
--- 769,775 ----
  alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br><small>
! $OpenBSD: 50.html,v 1.5 2011/10/31 22:14:10 djm Exp $
  </small>
  
  </body>