OpenSSH 5.6 Released into the Wild
The secure communication solution gets an upgrade.
OpenSSH or OpenBSD Secure Shell got an update to 5.6. The project features a slew of new features and bug fixes, but maintains compatibility with SSH protocol 1.3, 1.5, and 2.0.
New to 5.6 is a ControlPersist option to ssh_config, which automatically launches a background ssh multiplex master during connection. SSH now logs hostname and address concted to LogLevel=verbose after a successful authentication. This is done to manage phishing attacks by servers with trusted keys that accept authentication silently and automatically before presenting falsified password/passphrase prompts.
5.6 also allows ssh-keygent to import and export PEM and PKCS#8 keys. Debug messages can be queued, and remote forwarding with dynamic port allocation. SSHd now supports indirection in matching principal names listed in certificates.
For a full list of new features and bug fixes, visit www.openssh.com/txt/release-5.6.
Tag Cloud
News
-
Heartbleed Bleeds On
According to a report, many potential victims of the Heartbleed attack have patched their systems, but few have cleaned up the crime scene to protect themselves from the effects of a previous intrusion.
-
Drone Brain Goes Open Source
DARPA and NICTA release the code for the ultra-secure microkernel system used in aerial drones.
-
Password Management Services Vulnerable to Attack
Should you trust an online service to store your online passwords?
-
New Raspberry Pi Adds Two USB Ports
New B+ board lets you build cool things without the complication of a powered USB hub.
-
Microsoft Grabs No-IP.com Domains
Redmond rushes in to root out alleged malware haven.
-
Firefox Steps into 3D
New initiative will bring futuristic virtual reality effects to the web surfing experience.
-
New Trojan Targets Online Banking
Dyreza malware launches a man-in-the-middle attack that compromises SSL.
-
HP Rolls Out Massive Cloud Network
New cloud combines worldwide access with local attention to data security.
-
New Attack Targets Wireless Logins
A first cousin of the recent Heartbleed attack affects EAP-based wireless and peer-to-peer authentication.
-
Geeks Petition for Free Lenovo BIOS
FOSS community acts to protect freedom of choice for laptop devices.