OpenSSH 4.6/4.6p1 released

OpenSSH is a FREE version of the SSH connectivity tools that technical users of the Internet rely on. Users of telnet, rlogin, and ftp may not realize that their password is transmitted across the Internet unencrypted, but it is. OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other attacks. Additionally, OpenSSH provides secure tunneling capabilities and several authentication methods, and supports all SSH protocol versions.

Changelog

  • sshd now allows the enabling and disabling of authentication
    methods on a per user, group, host and network basis via the
    Match directive in sshd_config.
  • The following bugs have been fixed in this release:
  • Clear SIGALRM when restarting due to SIGHUP. Prevents stray
    signal from taking down sshd if a connection was pending at
    the time SIGHUP was received
  • sftp returned a zero exit status when upload failed due to write
    errors (bugzilla #1252)
  • fixed an inconsistent check for a terminal when displaying scp
    progress meter (bugzilla #1265)
  • Parsing of time values in Match blocks was incorrectly applied
    to the global configuration (bugzilla #1275)
  • Allow multiple forwarding options to work when specified in a
    PermitOpen directive (bugzilla #1267)
  • Interoperate with ssh.com versions that do not support binding
    remote port forwarding sessions to a hostname (bugzilla #1019)
  • Portable OpenSSH bugs fixed:
  • "hang on exit" when background processes are running at the time
    of exit on a ttyful/login session (bugzilla #52)
  • Fix typos in the ssh-rand-helper(8) man page (bugzilla #1259)
  • Check that some SIG records have been returned in getrrsetbyname
    (bugzilla #1281)
  • Fix contrib/findssl for platforms that lack "which" (bugzilla
    #1237)
  • Work around bug in OpenSSL 0.9.8e that broke aes256-ctr,
    aes192-ctr, arcfour256 (bugzilla #1291)