web analytics
It runs on Linux

OpenSSH 7.1 released

Because of recently discovered security flaws, OpenSSH 7.1 is released, just one and a half week after version 7.0. So you can consider this as a bugfix release.

OpenSSH

OpenSSH

OpenSSH is a 100% complete SSH protocol (version 1.3, 1.5 and 2.0) implementation and includes server support and sftp.


Changes since OpenSSH 7.0

Security

  • sshd(8): OpenSSH 7.0 contained a logic error in PermitRootLogin=
    prohibit-password/without-password that could, depending on
    compile-time configuration, permit password authentication to
    root while preventing other forms of authentication. This problem
    was reported by Mantas Mikulenas.

Bugfixes

  • ssh(1), sshd(8): add compatibility workarounds for FuTTY
  • ssh(1), sshd(8): refine compatibility workarounds for WinSCP
  • Fix a number of memory faults (double-free, free of uninitialised
    memory, etc) in ssh(1) and ssh-keygen(1). Reported by Mateusz
    Kocielski.

Head over here to download OpenSSH 7.1.