opnsense-src/lib/libpam
Ed Maste 6ac1039d04 ssh: update to OpenSSH v8.9p1
Release notes are available at https://www.openssh.com/txt/release-8.9

Some highlights:

 * ssh(1), sshd(8), ssh-add(1), ssh-agent(1): add a system for
   restricting forwarding and use of keys added to ssh-agent(1)

 * ssh(1), sshd(8): add the sntrup761x25519-sha512@openssh.com hybrid
   ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the
   default KEXAlgorithms list (after the ECDH methods but before the
   prime-group DH ones). The next release of OpenSSH is likely to
   make this key exchange the default method.

 * sshd(8), portable OpenSSH only: this release removes in-built
   support for MD5-hashed passwords. If you require these on your
   system then we recommend linking against libxcrypt or similar.

Future deprecation notice
=========================

A near-future release of OpenSSH will switch scp(1) from using the
legacy scp/rcp protocol to using SFTP by default.

Legacy scp/rcp performs wildcard expansion of remote filenames (e.g.
"scp host:* .") through the remote shell. This has the side effect of
requiring double quoting of shell meta-characters in file names
included on scp(1) command-lines, otherwise they could be interpreted
as shell commands on the remote side.

MFC after:	1 month
Relnotes:	Yes
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit 1323ec5712)
(cherry picked from commit 58def461e2)
2022-10-06 21:39:00 -04:00
..
libpam Don't explicitly specify c99 or gnu99 as the default is now gnu99. 2020-08-17 05:57:02 +00:00
modules ssh: update to OpenSSH v8.9p1 2022-10-06 21:39:00 -04:00
pam.d pkgbase: Put more binaries/lib in runtime 2022-01-05 18:23:51 +01:00
static_libpam Don't use CCACHE for linking. 2018-06-27 19:29:15 +00:00
Makefile Move all pam related config to lib/libpam/ 2018-09-13 04:08:48 +00:00
Makefile.inc Replace _pam_verbose_error() with a macro. This was the last difference 2016-06-08 11:47:19 +00:00