opnsense-src/secure
Ed Maste 6ac1039d04 ssh: update to OpenSSH v8.9p1
Release notes are available at https://www.openssh.com/txt/release-8.9

Some highlights:

 * ssh(1), sshd(8), ssh-add(1), ssh-agent(1): add a system for
   restricting forwarding and use of keys added to ssh-agent(1)

 * ssh(1), sshd(8): add the sntrup761x25519-sha512@openssh.com hybrid
   ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the
   default KEXAlgorithms list (after the ECDH methods but before the
   prime-group DH ones). The next release of OpenSSH is likely to
   make this key exchange the default method.

 * sshd(8), portable OpenSSH only: this release removes in-built
   support for MD5-hashed passwords. If you require these on your
   system then we recommend linking against libxcrypt or similar.

Future deprecation notice
=========================

A near-future release of OpenSSH will switch scp(1) from using the
legacy scp/rcp protocol to using SFTP by default.

Legacy scp/rcp performs wildcard expansion of remote filenames (e.g.
"scp host:* .") through the remote shell. This has the side effect of
requiring double quoting of shell meta-characters in file names
included on scp(1) command-lines, otherwise they could be interpreted
as shell commands on the remote side.

MFC after:	1 month
Relnotes:	Yes
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit 1323ec5712)
(cherry picked from commit 58def461e2)
2022-10-06 21:39:00 -04:00
..
caroot caroot: cumulative cert update 2021-09-04 02:39:07 -05:00
lib OpenSSL: Regen manual pages for OpenSSL 1.1.1q 2022-07-05 12:27:33 -04:00
libexec ssh: enable FIDO/U2F keys 2022-02-09 19:03:21 -05:00
tests Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
usr.bin OpenSSL: Regen manual pages for OpenSSL 1.1.1q 2022-07-05 12:27:33 -04:00
usr.sbin ssh: update to OpenSSH v8.9p1 2022-10-06 21:39:00 -04:00
Makefile [1/3] Initial infrastructure for SSL root bundle in base 2019-10-02 01:05:29 +00:00
Makefile.inc ssh: move common Makefile boilerplate to a new ssh.mk 2021-11-08 16:24:09 -05:00
ssh.mk ssh: use standalone config file for security key support 2022-04-15 12:30:21 -04:00