OpenSSH Version 8.0 Released
Written by Nikos Vaggalis   
Tuesday, 07 May 2019

The OpenSSH suite, a complete SSH protocol 2.0 implementation which includes a sftp client and server, reaches version 8.0.

 

The release mainly fixes a vulnerability (CVE-2019-6111) in the scp protocol that:

when copying files from a remote system
to a local directory, scp(1) did not verify that the filenames that
the server sent matched those requested by the client. This could allow a hostile server to create or clobber unexpected local files with attacker-controlled content.

This release adds client-side checking that the filenames sent from the server match the command-line request

It had been advised before not to use the scp protocol since it is old and buggy and instead use sftp.Nevertheless this release provides a fix for those hardcore scp users, who for instance have complained that using scp in scripts is much easier than using sftp.

Amongst the enhancements, the most important are the support for ECDSA keys in PKCS#11 tokens and that the RSA keys' generated size now defaults to 3072 bits.

Of course, there are also several bug fixes such as:

  • Avoid sending SIGPIPE to child processes if they attempt
    to write to stderr after their parent processes have exited

  • Sanitize scp filenames to allow UTF-8 characters without
    terminal control sequences

The new release also fixes a number of memory leaks.

Full details and the announcement here.

opensshsq

More Information

[openssh-unix-announce] Announce: OpenSSH 8.0 released

OpenSSH 

Related Articles

EU Bug Bounty - Software Security as a Civil Right 

 

To be informed about new articles on I Programmer, sign up for our weekly newsletter, subscribe to the RSS feed and follow us on Twitter, Facebook or Linkedin.

 

Banner


Google Introduces Gemini CLI Open-Source Agent
08/07/2025

Google is introducing Gemini CLI, an open-source AI agent that offers lightweight access to Gemini, Google's conversational chatbot that is based on Google's multimodal large language model  [ ... ]



Fei-Fei Li On Spatial Intelligence As The Next Frontier In AI
11/07/2025

Last month in front of an enthusiastic audience at Y Combinator, Fei-Fei Li, often called the godmother of AI, talked to Diana Hu about spatial intelligence and why she considers it the next crit [ ... ]


More News

 

pico book

 

Comments




or email your comment to: comments@i-programmer.info

Last Updated ( Tuesday, 07 May 2019 )