OpenSSH 5.6 Released into the Wild
The secure communication solution gets an upgrade.
OpenSSH or OpenBSD Secure Shell got an update to 5.6. The project features a slew of new features and bug fixes, but maintains compatibility with SSH protocol 1.3, 1.5, and 2.0.
New to 5.6 is a ControlPersist option to ssh_config, which automatically launches a background ssh multiplex master during connection. SSH now logs hostname and address concted to LogLevel=verbose after a successful authentication. This is done to manage phishing attacks by servers with trusted keys that accept authentication silently and automatically before presenting falsified password/passphrase prompts.
5.6 also allows ssh-keygent to import and export PEM and PKCS#8 keys. Debug messages can be queued, and remote forwarding with dynamic port allocation. SSHd now supports indirection in matching principal names listed in certificates.
For a full list of new features and bug fixes, visit www.openssh.com/txt/release-5.6.
Issue 173/2015
Buy this issue as a PDF
News
-
Old Vulnerabilities Are Kept Alive Through Bad Configuration
HP's annual Cyber Risk report offers a bleak look at the state of IT.
-
Linus Torvalds Announces Linux 4.0
But what do the big numbers really mean?
-
Microsoft Frees CoreCLR
.NET Core execution engine is the basis for cross-platform .NET implementations.
-
New Trojan Attacks Linux Servers
The Xnote trojan hides itself on the target system and will launch a variety of attacks on command.
-
Cisco Releases Annual Security Report
Spammers go low-volume, and 90% of IE browsers are unpatched.
-
Zero Day Exploits Target Flash
Adobe scrambles to release patches for vulnerable Flash Player.
-
Intel Unveils Compute Stick
Four-inch-long computer on a stick lets you boot a full Linux system from any HDMI display device.
-
Obama Proposes Personal Data Notification Law
New statute would require companies to report break-ins to consumers.
-
TGXf Project Warns of File Transfer through Screen Pixels
Weird data transfer technique avoids all standard security measures.
-
Industry Giants Announce a Fix for the Password Mess
FIDO alliance declares the beginning of the end for old-style login authentication.