From f5be0fb218a6dd1153678dd99e4ecbff306b8165 Mon Sep 17 00:00:00 2001 From: Matt Johnston Date: Fri, 22 Feb 2013 23:54:47 +0800 Subject: [PATCH] Some changes since 2012.55 --- CHANGES | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/CHANGES b/CHANGES index 3e14bad..535d6f1 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,19 @@ +- Allow specifying cipher (-c) and MAC (-m) lists for dbclient + +- Allow using 'none' cipher or MAC + +- Allow a user in immediately if the account has a blank password and blank + passwords are enabled + +- Include a few extra sources of entropy from /proc on Linux, hash private keys + as well + +- Added sha2-256 and sha2-512 hashes + +- Don't sent "localhost" for -R forward connections, reported by Denis Bider + +- Add "-B" runtime option to allow blank passwords + 2012.55 - Wednesday 22 February 2012 - Security: Fix use-after-free bug that could be triggered if command="..."