The following significant bugs have been fixed in this release:
- - sshd(8):
+
- sshd(8):
fix refusal to accept certificate if a key of a different type to the
CA key appeared in authorized_keys before the CA key.
-
- ssh(1),
- ssh-agent(1)
+
- ssh(1),
+ ssh-agent(1)
and
- sshd(8):
+ sshd(8):
Use a monotonic time source for timers so that things like keepalives
and rekeying will work properly over clock steps.
-
- sftp(1):
+
- sftp(1):
update progressmeter when data is acknowledged, not when it's sent.
(bz#2108)
-
- ssh(1)
+
- ssh(1)
and
- ssh-keygen(1):
+ ssh-keygen(1):
improve error messages when the current user does not exist in
/etc/passwd. (bz#2125)
-
- ssh(1):
+
- ssh(1):
reset the order in which public keys are tried after partial
authentication success.
-
- ssh-agent(1):
+
- ssh-agent(1):
clean up socket files after SIGINT when in debug mode. (bz#2120)
-
- ssh(1)
+
- ssh(1)
and others: avoid confusing error messages in the case of broken system
resolver configurations. (bz#2122)
-
- ssh(1):
+
- ssh(1):
set TCP nodelay for connections started with -N. (bz#2124)
-
- ssh(1):
+
- ssh(1):
correct manual for permission requirements on ~/.ssh/config.
(bz#2078)
-
- ssh(1):
+
- ssh(1):
fix ControlPersist timeout not triggering in cases where TCP
connections have hung. (bz#1917)
-
- ssh(1):
+
- ssh(1):
properly detach a ControlPersist master from its controlling
terminal.
-
- sftp(1):
+
- sftp(1):
avoid crashes in libedit when it has been compiled with multi-byte
character support. (bz#1990)
-
- sshd(8):
+
- sshd(8):
when running sshd -D, close stderr unless we have explicitly
requested logging to stderr. (bz#1976)
-
- ssh(1):
+
- ssh(1):
fix incomplete bzero. (bz#2100)
-
- sshd(8):
+
- sshd(8):
log and error and exit if ChrootDirectory is specified and
running without root privileges.
- Many improvements to the regression test suite. In particular log
files are now saved from
- ssh(1)
+ ssh(1)
and
- sshd(8)
+ sshd(8)
after failures.
- Fix a number of memory leaks. (bz#1967, bz#2096 and others)
-
- sshd(8):
+
- sshd(8):
fix public key authentication when a :style is appended to the
requested username.
-
- ssh(1):
+
- ssh(1):
do not fatally exit when attempting to cleanup multiplexing-created
channels that are incompletely opened. (bz#2079)
@@ -472,9 +472,9 @@
To make a boot floppy under MS-DOS, use the "rawrite" utility located
at CD1:5.4/tools/rawrite.exe. To make the boot floppy under a Unix OS,
use the
-dd(1)
+dd(1)
utility. The following is an example usage of
-dd(1),
+dd(1),
where the device could be "floppy", "rfd0c", or
"rfd0a".
@@ -774,7 +774,7 @@
OpenBSD ports system.
The ports/ directory represents a CVS (see the manpage for
-
+
cvs(1) if
you aren't familiar with CVS) checkout of our ports. As with our complete
source tree, our ports tree is available via