OpenSSH 5.6 Released into the Wild
The secure communication solution gets an upgrade.
OpenSSH or OpenBSD Secure Shell got an update to 5.6. The project features a slew of new features and bug fixes, but maintains compatibility with SSH protocol 1.3, 1.5, and 2.0.
New to 5.6 is a ControlPersist option to ssh_config, which automatically launches a background ssh multiplex master during connection. SSH now logs hostname and address concted to LogLevel=verbose after a successful authentication. This is done to manage phishing attacks by servers with trusted keys that accept authentication silently and automatically before presenting falsified password/passphrase prompts.
5.6 also allows ssh-keygent to import and export PEM and PKCS#8 keys. Debug messages can be queued, and remote forwarding with dynamic port allocation. SSHd now supports indirection in matching principal names listed in certificates.
For a full list of new features and bug fixes, visit www.openssh.com/txt/release-5.6.
Issue 163/2014
Buy this issue as a PDF
Digital Issue: Price $9.99
(incl. VAT)
Tag Cloud
News
-
KDE Announces Software Compilation 4.13
New release comes with better semantic search and improvements to Kontact.
-
Coverity: Open Source Code has Fewer Defects
Annual code quality report shows FOSS is more secure at all project size levels.
-
An Even Smaller Raspberry Pi
The Raspberry Pi Foundation has announced an even smaller version of the tiny computer that will fit into a DIMM slot.
-
Freaky Privilege Escalation Attack
A new class of problems lets a malicious app pre-configure an invisible privilege update.
-
Facebook Rolls Out New PHP-like Programming Language
New Hack language adds static typing and other conveniences.
-
Fedora Announces Innovative Crytography Policy System
New crypto policy system will offer easier configuration and more uniform security.
-
Shuttleworth Calls for Declarative Firmware
Ubuntu founder denounces insecurity in proprietary, close-source software blobs.
-
New TLS Attack Takes the S out of HTTPS
Vulnerability affects many Linux web servers
-
Munich Adopts Kolab
The Bavarian capital shuns Microsoft, Google, and other alternatives to implement an open source groupware solution.
-
Canonical Announces Ubuntu Smartphones
Phone vendor partnerships bring Mark Shuttleworth's dream of Ubuntu on a phone a step closer to reality.