OpenSSH cikakken aiwatar da ka'idar SSH 2.0, gami da tallafin SFTP.
Wannan sakin ya haɗa da goyan baya ga masu tabbatar da kayan aikin FIDO/U2F. Ana tallafawa na'urorin FIDO a ƙarƙashin sabbin nau'ikan maɓalli "ecdsa-sk" da "ed25519-sk", tare da takaddun shaida masu dacewa.
Wannan sakin ya ƙunshi ɗimbin canje-canje waɗanda zasu iya shafar wanzuwar
daidaitawa:
- Cire "ssh-rsa" daga lissafin CASignatureAlgorithms. Yanzu, lokacin sanya hannu kan sabbin takaddun shaida, “rsa-sha2-512” za a yi amfani da shi ta tsohuwa;
- An cire diffie-hellman-group14-sha1 algorithm don duka abokin ciniki da uwar garken;
- Lokacin amfani da utility ps, taken tsari na sshd yanzu yana nuna adadin haɗin haɗin da ke ƙoƙarin tabbatarwa da iyakokin da aka saita ta amfani da MaxStartups;
- An ƙara sabon fayil ɗin ssh-sk-helper mai aiwatarwa. An ƙera shi don ware ɗakunan karatu na FIDO/U2F.
An kuma sanar da cewa nan ba da jimawa ba za a daina goyan bayan SHA-1 hashing algorithm.
source: linux.org.ru