Changelog
openssh (1:8.8p1-1) unstable; urgency=medium
* New upstream release (https://www.openssh.com/releasenotes.html#8.8p1,
closes: #996391):
- This release disables RSA signatures using the SHA-1 hash algorithm by
default. (Existing RSA keys may still be used and do not need to be
replaced; see NEWS.Debian if you have problems connecting to old SSH
servers.)
- ssh(1): allow the ssh_config(5) CanonicalizePermittedCNAMEs directive
to accept a "none" argument to specify the default behaviour.
- scp(1): when using the SFTP protocol, continue transferring files
after a transfer error occurs, better matching original scp/rcp
behaviour.
- ssh(1): fixed a number of memory leaks in multiplexing,
- ssh-keygen(1): avoid crash when using the -Y find-principals command.
- A number of documentation and manual improvements.
- ssh(1)/sshd(8): some fixes to the pselect(2) replacement compatibility
code.
* Work around missing RSA SHA-2 signature support in conch until the
upstream fix lands in Debian.
-- Colin Watson <email address hidden> Tue, 15 Feb 2022 19:20:21 +0000
