en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#2574974648c68c738aec3ff96644d888d7913a37 OpenSSH: Update to 10.3p1Full release notes are available athttps://www.openssh.com/txt/release-10.3Selected highlights from the release notes: * ssh(1), sshd(8): remove bug compatibility for implementations that don't support rekeying. If such an implementation tries to interoperate with OpenSSH, it will now eventually fail when the transport needs rekeying. * ssh(1), sshd(8): support IANA-assigned codepoints for SSH agent forwarding, as per draft-ietf-sshm-ssh-agent. Support for the new names is advertised via the EXT_INFO message. If a server offers support for the new names, then they are used preferentially. * ssh(1): add a ~I escape option that shows information about the current SSH connection. * sshd(8): add 'invaliduser' penalty to PerSourcePenalties, which is applied to login attempts for usernames that do not match real accounts. Defaults to 5s to match 'authfail' but allows administrators to block such attempts for longer if desired. * Support the ed25519 signature scheme via libcrypto.Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D56999 List of files: /freebsd/crypto/openssh/msg.c Thu, 14 May 2026 20:59:30 +0200 Ed Maste <emaste@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#0fdf8fae8b569bf9fff3b5171e669dcd7cf9c79e openssh: Update to 9.8p1Highlights from the release notes are reproduced below. Some securityand bug fixes were previously merged into FreeBSD and have been elided.See the upstream release notes for full details(https://www.openssh.com/releasenotes.html).---Future deprecation notice=========================OpenSSH plans to remove support for the DSA signature algorithm inearly 2025.Potentially-incompatible changes-------------------------------- * sshd(8): the server will now block client addresses that repeatedly fail authentication, repeatedly connect without ever completing authentication or that crash the server. See the discussion of PerSourcePenalties below for more information. Operators of servers that accept connections from many users, or servers that accept connections from addresses behind NAT or proxies may need to consider these settings. * sshd(8): the server has been split into a listener binary, sshd(8), and a per-session binary "sshd-session". This allows for a much smaller listener binary, as it no longer needs to support the SSH protocol. As part of this work, support for disabling privilege separation (which previously required code changes to disable) and disabling re-execution of sshd(8) has been removed. Further separation of sshd-session into additional, minimal binaries is planned for the future. * sshd(8): several log messages have changed. In particular, some log messages will be tagged with as originating from a process named "sshd-session" rather than "sshd". * ssh-keyscan(1): this tool previously emitted comment lines containing the hostname and SSH protocol banner to standard error. This release now emits them to standard output, but adds a new "-q" flag to silence them altogether. * sshd(8): (portable OpenSSH only) sshd will no longer use argv[0] as the PAM service name. A new "PAMServiceName" sshd_config(5) directive allows selecting the service name at runtime. This defaults to "sshd". bz2101New features------------ * sshd(8): sshd(8) will now penalise client addresses that, for various reasons, do not successfully complete authentication. This feature is controlled by a new sshd_config(5) PerSourcePenalties option and is on by default. * ssh(8): allow the HostkeyAlgorithms directive to disable the implicit fallback from certificate host key to plain host keys.Portability----------- * sshd(8): expose SSH_AUTH_INFO_0 always to PAM auth modules unconditionally. The previous behaviour was to expose it only when particular authentication methods were in use. * ssh(1), ssh-agent(8): allow the presence of the WAYLAND_DISPLAY environment variable to enable SSH_ASKPASS, similarly to the X11 DISPLAY environment variable. GHPR479---Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D48914 List of files: /freebsd/crypto/openssh/msg.c Wed, 19 Feb 2025 18:20:44 +0100 Ed Maste <emaste@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#19261079b74319502c6ffa1249920079f0f69a72 openssh: update to OpenSSH v8.7p1Some notable changes, from upstream's release notes:- sshd(8): Remove support for obsolete "host/port" syntax.- ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes".- ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm.- ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa" (RSA/SHA1) algorithm from those accepted for certificate signatures.- ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F support to provide address-space isolation for token middleware libraries (including the internal one).- ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions.- scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default.- scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used.Additional integration work is needed to support FIDO/U2F in the basesystem.Deprecation Notice------------------OpenSSH will disable the ssh-rsa signature scheme by default in thenext release.Reviewed by: impMFC after: 1 monthRelnotes: YesSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D29985 List of files: /freebsd/crypto/openssh/msg.c Wed, 08 Sep 2021 03:05:51 +0200 Ed Maste <emaste@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#3af64f03119a159ac15eb75b92d346705b490385 Merge ^/head r338392 through r338594. List of files: /freebsd/crypto/openssh/msg.c Tue, 11 Sep 2018 20:41:00 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#190cef3d52236565eb22e18b33e9e865ec634aa3 Upgrade to OpenSSH 7.8p1.Approved by: re (kib@) List of files: /freebsd/crypto/openssh/msg.c Mon, 10 Sep 2018 18:20:12 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#d9b9dae1a954c5a277eada994d268f88eb5f3f20 Merge ^/head r294169 through r294598. List of files: /freebsd/crypto/openssh/msg.c Fri, 22 Jan 2016 21:41:56 +0100 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#009e81b16465ea457c0e63fd49fe77f47cc27a5a MFH @r294567 List of files: /freebsd/crypto/openssh/msg.c Fri, 22 Jan 2016 16:11:40 +0100 Bjoern A. Zeeb <bz@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#59d43d11fe3e3f490ad5fce4d0349e9eeaf8d765 MFHSponsored by: The FreeBSD Foundation List of files: /freebsd/crypto/openssh/msg.c Wed, 20 Jan 2016 10:50:54 +0100 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#bc5531debefeb54993d01d4f3c8b33ccbe0b4d95 Upgrade to OpenSSH 6.8p1. List of files: /freebsd/crypto/openssh/msg.c Tue, 19 Jan 2016 19:28:23 +0100 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#761efaa70c2ed8d35722b7bc234a46bf2457f876 Vendor import of OpenSSH 4.4p1. List of files: /freebsd/crypto/openssh/msg.c Sat, 30 Sep 2006 15:29:51 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#a435c625d7cd13f4d19b00b2e72466366453816b This commit was generated by cvs2svn to compensate for changes in r162852,which included commits to RCS files with non-trunk default branches. List of files: /freebsd/crypto/openssh/msg.c Sat, 30 Sep 2006 15:29:51 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#043840df5be0cf8490b48a08fe6d9c316f473f58 Vendor import of OpenSSH 4.2p1. List of files: /freebsd/crypto/openssh/msg.c Sat, 03 Sep 2005 08:59:33 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#f8a2a7f14a354d1231b54c452245604bf11bed62 This commit was generated by cvs2svn to compensate for changes in r149749,which included commits to RCS files with non-trunk default branches. List of files: /freebsd/crypto/openssh/msg.c Sat, 03 Sep 2005 08:59:33 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#efcad6b72fe9d4f7ea99c021f4903d09ca31b666 Vendor import of OpenSSH 3.8p1. List of files: /freebsd/crypto/openssh/msg.c Thu, 26 Feb 2004 11:38:49 +0100 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#6b475b41d84ea1713a44d00ae3e19ac766eeb702 This commit was generated by cvs2svn to compensate for changes in r126274,which included commits to RCS files with non-trunk default branches. List of files: /freebsd/crypto/openssh/msg.c Thu, 26 Feb 2004 11:38:49 +0100 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#d95e11bf7e5a59b5c3f81bd8dfc2918ee7d3bada Vendor import of OpenSSH 3.7.1p2. List of files: /freebsd/crypto/openssh/msg.c Wed, 07 Jan 2004 12:10:17 +0100 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#fb7dd0a77c4413c791171474efe134e54c68fecb This commit was generated by cvs2svn to compensate for changes in r124208,which included commits to RCS files with non-trunk default branches. List of files: /freebsd/crypto/openssh/msg.c Wed, 07 Jan 2004 12:10:17 +0100 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#d0c8c0bcc279fcf7568c5e97c15c115cbf83be4c Vendor import of OpenSSH-portable 3.6.1p1. List of files: /freebsd/crypto/openssh/msg.c Wed, 23 Apr 2003 18:53:02 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#486cd0043eb7251b30e30aa620eb213fb48b4c22 This commit was generated by cvs2svn to compensate for changes in r113908,which included commits to RCS files with non-trunk default branches. List of files: /freebsd/crypto/openssh/msg.c Wed, 23 Apr 2003 18:53:02 +0200 Dag-Erling Smørgrav <des@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssh/msg.c#4b17dab0ba7675679933f9f3d4aed1cd28dd0393 Vendor import of OpenSSH-portable 3.5p1. List of files: /freebsd/crypto/openssh/msg.c Tue, 29 Oct 2002 10:43:00 +0100 Dag-Erling Smørgrav <des@FreeBSD.org>