The following significant bugs have been fixed in this release:
! - sshd(8):
fix refusal to accept certificate if a key of a different type to the
CA key appeared in authorized_keys before the CA key.
!
- ssh(1),
! ssh-agent(1)
and
! sshd(8):
Use a monotonic time source for timers so that things like keepalives
and rekeying will work properly over clock steps.
!
- sftp(1):
update progressmeter when data is acknowledged, not when it's sent.
(bz#2108)
!
- ssh(1)
and
! ssh-keygen(1):
improve error messages when the current user does not exist in
/etc/passwd. (bz#2125)
!
- ssh(1):
reset the order in which public keys are tried after partial
authentication success.
!
- ssh-agent(1):
clean up socket files after SIGINT when in debug mode. (bz#2120)
!
- ssh(1)
and others: avoid confusing error messages in the case of broken system
resolver configurations. (bz#2122)
!
- ssh(1):
set TCP nodelay for connections started with -N. (bz#2124)
!
- ssh(1):
correct manual for permission requirements on ~/.ssh/config.
(bz#2078)
!
- ssh(1):
fix ControlPersist timeout not triggering in cases where TCP
connections have hung. (bz#1917)
!
- ssh(1):
properly detach a ControlPersist master from its controlling
terminal.
!
- sftp(1):
avoid crashes in libedit when it has been compiled with multi-byte
character support. (bz#1990)
!
- sshd(8):
when running sshd -D, close stderr unless we have explicitly
requested logging to stderr. (bz#1976)
!
- ssh(1):
fix incomplete bzero. (bz#2100)
!
- sshd(8):
log and error and exit if ChrootDirectory is specified and
running without root privileges.
- Many improvements to the regression test suite. In particular log
files are now saved from
! ssh(1)
and
! sshd(8)
after failures.
- Fix a number of memory leaks. (bz#1967, bz#2096 and others)
!
- sshd(8):
fix public key authentication when a :style is appended to the
requested username.
!
- ssh(1):
do not fatally exit when attempting to cleanup multiplexing-created
channels that are incompletely opened. (bz#2079)
***************
*** 472,480 ****
To make a boot floppy under MS-DOS, use the "rawrite" utility located
at CD1:5.4/tools/rawrite.exe. To make the boot floppy under a Unix OS,
use the
! dd(1)
utility. The following is an example usage of
! dd(1),
where the device could be "floppy", "rfd0c", or
"rfd0a".
--- 472,480 ----
To make a boot floppy under MS-DOS, use the "rawrite" utility located
at CD1:5.4/tools/rawrite.exe. To make the boot floppy under a Unix OS,
use the
! dd(1)
utility. The following is an example usage of
! dd(1),
where the device could be "floppy", "rfd0c", or
"rfd0a".
***************
*** 774,780 ****
OpenBSD ports system.
The ports/ directory represents a CVS (see the manpage for
!
cvs(1) if
you aren't familiar with CVS) checkout of our ports. As with our complete
source tree, our ports tree is available via
--- 774,780 ----
OpenBSD ports system.
The ports/ directory represents a CVS (see the manpage for
!
cvs(1) if
you aren't familiar with CVS) checkout of our ports. As with our complete
source tree, our ports tree is available via