===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/53.html,v
retrieving revision 1.36
retrieving revision 1.37
diff -c -r1.36 -r1.37
*** www/53.html	2013/02/22 16:23:22	1.36
--- www/53.html	2013/02/24 12:27:41	1.37
***************
*** 195,206 ****
      <ul>
      <li>New features:
        <ul>
!       <!-- aes-gcm, etm, umac128, AuthorizedKeysCommand, KRLs, ... -->
!       <li>...
        </ul>
      <li>The following significant bugs have been fixed in this release:
        <ul>
!       <li>...
        </ul>
      </ul>
  <p>
--- 195,313 ----
      <ul>
      <li>New features:
        <ul>
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>
!           and
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
!           Added support for AES-GCM authenticated encryption in SSH protocol 2.
!           The new cipher is available as "aes128-gcm@openssh.com" and
!           "aes256-gcm@openssh.com". It uses an identical packet format to the
!           AES-GCM mode specified in RFC 5647, but uses simpler and different
!           selection rules during key exchange.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>
!           and
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
!           Added support for encrypt-then-mac (EtM) MAC modes for SSH protocol 2.
!           These modes alter the packet format and compute the MAC over the
!           packet length and encrypted packet rather than over the plaintext
!           data. These modes are considered more secure and are used by default
!           when available.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>
!           and
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
!           Added support for the UMAC-128 MAC as "umac-128@openssh.com" and
!           "umac-128-etm@openssh.com". The latter being an encrypt-then-mac mode.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
!           Added support for multiple required authentication in SSH protocol 2
!           via an <tt>AuthenticationMethods</tt> option. This option lists one
!           or more comma-separated lists of authentication method names.
!           Successful completion of all the methods in any list is required for
!           authentication to complete. This allows, for example, requiring a
!           user having to authenticate via public key or GSSAPI before they are
!           offered password authentication.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>
!           and
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
!           Added support for Key Revocation Lists (KRLs), a compact binary
!           format to represent lists of revoked keys and certificates that take
!           as little as one bit per certificate when revoking by serial number.
!           KRLs may be generated using
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>
!           and are loaded into
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>
!           via the existing <tt>RevokedKeys</tt>
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5">sshd_config(5)</a>
!           option.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
!           <tt>IdentitiesOnly</tt> now applies to keys obtained from a
!           PKCS11Provider. This allows control of which keys are offered from
!           tokens using <tt>IdentityFile</tt>.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5">sshd_config(5)</a>'s
!           AllowTcpForwarding now accepts "<tt>local</tt>" and "<tt>remote</tt>"
!           in addition to its previous "<tt>yes</tt>"/"<tt>no</tt>" keywords to
!           allow the server to specify whether just local or remote TCP
!           forwarding is enabled.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
!           Added a
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5">sshd_config(5)</a>
!           option <tt>AuthorizedKeysCommand</tt> to support fetching
!           authorized_keys from a command in addition to (or instead of) from
!           the filesystem. The command is run under an account specified by an
!           <tt>AuthorizedKeysCommandUser</tt>
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5">sshd_config(5)</a>
!           option.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&amp;sektion=8">sftp-server(8)</a>:
!           Now supports a <tt>-d</tt> option to allow the starting directory to
!           be something other than the user's home directory.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
!           Now allows fingerprinting of keys hosted in PKCS#11 tokens using
!           "ssh-keygen -lD pkcs11_provider".
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
!           When SSH protocol 2 only is selected (the default),
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>
!           now immediately sends its SSH protocol banner to the server without
!           waiting to receive the server's banner, saving time when connecting.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>
!           Added <tt>~v</tt> and <tt>~V</tt> escape sequences to raise and lower
!           the logging level respectively.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>
!           Made the escape command help (<tt>~?</tt>) context sensitive so that
!           only commands that will work in the current session are shown.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
!           When deleting host lines from known_hosts using "ssh-keygen -R host",
!           <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>
!           now prints details of which lines were removed.
        </ul>
      <li>The following significant bugs have been fixed in this release:
        <ul>
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
!           Force a clean shutdown of ControlMaster client sessions when the
!           <tt>~.</tt> escape sequence is used. This means that <tt>~.</tt>
!           should now work in mux clients even if the server is no longer
!           responding.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
!           Correctly detect errors during local TCP forward setup in multiplexed
!           clients. (bz#2055)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a>:
!           Made deleting explicit keys "ssh-add -d" symmetric with adding keys
!           with respect to certificates. It now tries to delete the
!           corresponding certificate and respects the <tt>-k</tt> option to
!           allow deleting of the key only.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&amp;sektion=1">sftp(1)</a>:
!           Fix a number of parsing and command-editing bugs, including bz#1956.
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
!           When muxmaster is run with <tt>-N</tt>, ensured that it shuts down
!           gracefully when a client sends it "-O stop" rather than hanging
!           around. (bz#1985)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
!           When screening moduli candidates, append to the file rather than
!           overwriting to allow resumption. (bz#1957)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
!           Record "Received disconnect" messages at ERROR rather than INFO
!           priority. (bz#2057)
!       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
!           Loudly warn if explicitly-provided private key is unreadable.
!           (bz#1981)
        </ul>
      </ul>
  <p>
***************
*** 683,689 ****
  alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br><small>
! $OpenBSD: 53.html,v 1.36 2013/02/22 16:23:22 brad Exp $
  </small>
  
  </body>
--- 790,796 ----
  alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br><small>
! $OpenBSD: 53.html,v 1.37 2013/02/24 12:27:41 sobrado Exp $
  </small>
  
  </body>