This is a beta-release (non-production ready)
This release includes:
-
Upstream changes from OpenSSH 9.0 & OpenSSH 9.1.
-
Breaking changes - see upstream release notes for more information:
- Switches scp from using the legacy scp/rcp protocol to using the sftp protocol by default.
- SetEnv directives in ssh_config and sshd_config are now first-match-wins to match other directives. Previously if an environment variable was multiply specified the last set value would have been used.
- ssh-keygen -A (generate all default host key types) will no longer generate DSA keys.
-
Security Fixes:
- adds Mark of the Web (MOTW) to scp/sftp file transfers, when possible.
-
Fixes for various reliability issues listed here.
-
LibFido2 upgrade to version 1.12.0.
-
LibreSSL upgrade to version 3.6.1.
-
ZLib upgrade to version 1.2.13.