message when ChrootDirectory is active. bz#2485

• ssh(1): include PubkeyAcceptedKeyTypes in ssh -G config dump.

• sshd(8): avoid changing TunnelForwarding device flags if they are already what is needed; makes it possible to use tun/tap networking as non-root user if device permissions and interface flags are pre-established

• ssh(1), sshd(8): RekeyLimits could be exceeded by one packet. bz#2521

• ssh(1): fix multiplexing master failure to notice client exit.

• ssh(1), ssh-agent(1): avoid fatal() for PKCS11 tokens that present empty key IDs. bz#1773

• sshd(8): avoid printf of NULL argument. bz#2535

• ssh(1), sshd(8): allow RekeyLimits larger than 4GB. bz#2521

• ssh-keygen(1): sshd(8): fix several bugs in (unused) KRL signature support.

• ssh(1), sshd(8): fix connections with peers that use the key exchange guess feature of the protocol. bz#2515

• sshd(8): include remote port number in log messages. bz#2503

• ssh(1): don't try to load SSHv1 private key when compiled without SSHv1 support. bz#2505

• ssh-agent(1), ssh(1): fix incorrect error messages during key loading and signing errors. bz#2507

• ssh-keygen(1): don't leave empty temporary files when performing known_hosts file edits when known_hosts doesn't exist.

• sshd(8): correct packet format for tcpip-forward replies for requests that don't allocate a port bz#2509

• ssh(1), sshd(8): fix possible hang on closed output. bz#2469

• ssh(1): expand %i in ControlPath to UID. bz#2449

• ssh(1), sshd(8): fix return type of openssh_RSA_verify. bz#2460

• ssh(1), sshd(8): fix some option parsing memory leaks. bz#2182

• ssh(1): add a some debug output before DNS resolution; it's a place where ssh could previously silently stall in cases of unresponsive DNS servers. bz#2433

• ssh(1): remove spurious newline in visual hostkey. bz#2686

• ssh(1): fix printing (ssh -G ...) of HostKeyAlgorithms=+...

• ssh(1): fix expansion of HostkeyAlgorithms=+...

Documentation

• ssh_config(5), sshd_config(5): update default algorithm lists to match current reality. bz#2527

• ssh(1): mention -Q key-plain and -Q key-cert query options. bz#2455

• sshd_config(8): more clearly describe what AuthorizedKeysFile=none does.

• ssh_config(5): better document ExitOnForwardFailure. bz#2444

• sshd(5): mention internal DH-GEX fallback groups in manual. bz#2302

• sshd_config(5): better description for MaxSessions option. bz#2531

Portability

• ssh(1), sftp-server(8), ssh-agent(1), sshd(8): Support Illumos/ Solaris fine-grained privileges. Including a pre-auth privsep sandbox and several pledge() emulations. bz#2511

• Renovate redhat/openssh.spec, removing deprecated options and syntax.

• configure: allow --without-ssl-engine with --without-openssl

• sshd(8): fix multiple authentication using S/Key. bz#2502

• sshd(8): read back from libcrypto RAND_* before dropping privileges. Avoids sandboxing violations with BoringSSL.

• Fix name collision with system-provided glob(3) functions. bz#2463

• Adapt Makefile to use ssh-keygen -A when generating host keys. bz#2459

• configure: correct default value for --with-ssh1 bz#2457

• configure: better detection of _res symbol bz#2259

• support getrandom() syscall on Linux

Checksums:

• SHA1 (openssh-7.2.tar.gz) = 9567d00fffe655010c087aeb80c830cecbbecca6

• SHA256 (openssh-7.2.tar.gz) = 99GsHA8NwSGuEJhMc7hAOQ510y1xfGx27uJqyw73sCI=

• SHA1 (openssh-7.2p1.tar.gz) = d30a6fd472199ab5838a7668c0c5fd885fb8d371

• SHA256 (openssh-7.2p1.tar.gz) = lzzDey81l+TPWZsJ5gTnnA/l2bb1laJOke0GYoYLSsM=

Please note that the SHA256 signatures are base64 encoded and not hexadecimal (which is the default for most checksum tools). The PGP key used to sign the releases is available as RELEASE_KEY.asc from the mirror sites.

Reporting Bugs:

• Please read http://www.openssh.com/report.html Security bugs should be reported directly to openssh@openssh.com

OpenSSH is brought to you by Markus Friedl, Niels Provos, Theo de Raadt, Kevin Steves, Damien Miller, Darren Tucker, Jason McIntyre, Tim Rice and Ben Lindstrom.

OpenSSH 7.1p2 (2016-01-14)

OpenSSH 7.1p2 was released on 2016-01-14. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support. OpenSSH also includes transitional support for the legacy SSH 1.3 and 1.5 protocols that may be enabled at compile-time.

Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots or donated to the project. More information on donations may be found at: http://www.openssh.com/donations.html

Changes since OpenSSH 7.1p1

• SECURITY: ssh(1): The OpenSSH client code between 5.4 and 7.1 contains experimental support for resuming SSH-connections (roaming).

The matching server code has never been shipped, but the client code was enabled by default and could be tricked by a malicious server into leaking client memory to the server, including private client user keys.

The authentication of the server host key prevents exploitation by a man-in-the-middle, so this information leak is restricted to connections to malicious or compromised servers.

MITIGATION: For OpenSSH >= 5.4 the vulnerable code in the client can be completely disabled by adding 'UseRoaming no' to the global ssh_config(5) file, or to user configuration in ~/.ssh/config, or by passing -oUseRoaming=no on the command line.

PATCH: See below for a patch to disable this feature (Disabling Roaming in the Source Code).

This problem was reported by the Qualys Security Advisory team.

• SECURITY: Fix an out of-bound read access in the packet handling code. Reported by Ben Hawkes.

• PROTOCOL: Correctly interpret the 'first_kex_follows' option during the initial key exchange. Reported by Matt Johnston.

• Further use of explicit_bzero has been added in various buffer handling code paths to guard against compilers aggressively doing dead-store removal.

Checksums:

• SHA1 (openssh-7.1p2.tar.gz) = 9202f5a2a50c8a55ecfb830609df1e1fde97f758
• SHA256 (openssh-7.1p2.tar.gz) = dd75f024dcf21e06a0d6421d582690bf987a1f6323e32ad6619392f3bfde6bbd

Please note that the SHA256 signatures are base64 encoded and not hexadecimal (which is the default for most checksum tools). The PGP key used to sign the releases is available as RELEASE_KEY.asc from the mirror sites.

Reporting Bugs:

• Please read http://www.openssh.com/report.html Security bugs should be reported directly to openssh@openssh.com

OpenSSH is brought to you by Markus Friedl, Niels Provos, Theo de Raadt, Kevin Steves, Damien Miller, Darren Tucker, Jason McIntyre, Tim Rice and Ben Lindstrom.

Disabling Roaming in the Source Code:

--- readconf.c 30 Jul 2015 00:01:34 -0000 1.239 +++ readconf.c 13 Jan 2016 23:17:23 -0000 @@ -1648,7 +1648,7 @@ initialize_options(Options * options) options->tun_remote = -1; options->local_command = NULL; options->permit_local_command = -1;

• options->use_roaming = -1;

• options->use_roaming = 0; options->visual_host_key = -1; options->ip_qos_interactive = -1; options->ip_qos_bulk = -1; @@ -1819,8 +1819,7 @@ fill_default_options(Options * options) options->tun_remote = SSH_TUNID_ANY; if (options->permit_local_command == -1) options->permit_local_command = 0;

• if (options->use_roaming == -1)
• options->use_roaming = 1;

• options->use_roaming = 0; if (options->visual_host_key == -1) options->visual_host_key = 0; if (options->ip_qos_interactive == -1) --- ssh.c 30 Jul 2015 00:01:34 -0000 1.420 +++ ssh.c 13 Jan 2016 23:17:23 -0000 @@ -1882,9 +1882,6 @@ ssh_session2(void) fork_postauth(); }

• if (options.use_roaming)
• request_roaming();

return client_loop(tty_flag, tty_flag ? options.escape_char : SSH_ESCAPECHAR_NONE, id); }

OpenSSH 7.1/7.1p1 (2015-08-21)

OpenSSH 7.1 was released on 2015-08-21. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support. OpenSSH also includes transitional support for the legacy SSH 1.3 and 1.5 protocols that may be enabled at compile-time.

Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots or donated to the project. More information on donations may be found at: http://www.openssh.com/donations.html

Future deprecation notice

We plan on retiring more legacy cryptography in the next release including:

• Refusing all RSA keys smaller than 1024 bits (the current minimum is 768 bits)

• Several ciphers will be disabled by default: blowfish-cbc, cast128-cbc, all arcfour variants and the rijndael-cbc aliases for AES.

• MD5-based HMAC algorithms will be disabled by default.

This list reflects our current intentions, but please check the final release notes for OpenSSH 7.2 when it is released.

Changes since OpenSSH 7.0

This is a bugfix release.

Security

• sshd(8): OpenSSH 7.0 contained a logic error in PermitRootLogin= prohibit-password/without-password that could, depending on compile-time configuration, permit password authentication to root while preventing other forms of authentication. This problem was reported by Mantas Mikulenas.

Bugfixes

• ssh(1), sshd(8): add compatibility workarounds for FuTTY

• ssh(1), sshd(8): refine compatibility workarounds for WinSCP

• Fix a number of memory faults (double-free, free of uninitialised memory, etc) in ssh(1) and ssh-keygen(1). Reported by Mateusz Kocielski.

Checksums:

• SHA1 (openssh-7.1.tar.gz) = 06c1db39f33831fe004726e013b2cf84f1889042

• SHA256 (openssh-7.1.tar.gz) = H7U1se9EoBmhkKi2i7lqpMX9QHdDTsgpu7kd5VZUGSY=

• SHA1 (openssh-7.1p1.tar.gz) = ed22af19f962262c493fcc6ed8c8826b2761d9b6

• SHA256 (openssh-7.1p1.tar.gz) = /AptLR0GPVxm3/2VJJPQzaJWytIE9oHeD4TvhbKthCg=

Please note that the SHA256 signatures are base64 encoded and not hexadecimal (which is the default for most checksum tools). The PGP key used to sign the releases is available as RELEASE_KEY.asc from the mirror sites.

Reporting Bugs:

• Please read http://www.openssh.com/report.html Security bugs should be reported directly to openssh@openssh.com

OpenSSH is brought to you by Markus Friedl, Niels Provos, Theo de Raadt, Kevin Steves, Damien Miller, Darren Tucker, Jason McIntyre, Tim Rice and Ben Lindstrom.

OpenSSH 7.0/7.0p1 (2015-08-11)

OpenSSH 7.0 was released on 2015-08-11. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support. OpenSSH also includes transitional support for the legacy SSH 1.3 and 1.5 protocols that may be enabled at compile-time.

Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots or donated to the project. More information on donations may be found at: http://www.openssh.com/donations.html

Future deprecation notice

We plan on retiring more legacy cryptography in the next release including:

• Refusing all RSA keys smaller than 1024 bits (the current minimum is 768 bits)

• Several ciphers will be disabled by default: blowfish-cbc, cast128-cbc, all arcfour variants and the rijndael-cbc aliases for AES.

• MD5-based HMAC algorithms will be disabled by default.

This list reflects our current intentions, but please check the final release notes for OpenSSH 7.1 w