Ssh 1.2.25 release notes (The 1.2.24 was the same release, but it contained incorrect version of deattack.c, so this version replaces it). SECURITY ======== * Added crc-fix detection code from CORE SDI S.A., Buenos Aires, Argentina. See their security announcement for more information. SSHD ==== * Added time and date in the X11 connection rejected message requested by Jarkko Hietaniemi . * Added username to passwd command when forcing password change. * Disabled SO_LINGER by default. Added --enable-so-linger configure option that turns it on again. * Added user@host pattern matching in Allow/DenyUsers. Patch from Andrew Tridgell . * Added run time check for /var/X directory. Patch from Charles Karney . * Added warning about expiring passwords. Also added warning message when the account is going to expire. Idea from Harry Shamansky . Added PasswordExpireWarningDays and AccountExpireWarningDays server configuration variables. * Fixed login_getclass code for BSDI 2.1 (199510). Patch from Kazunori ANDO . * Fixed defining X11_DIR in the configure.in. Patch from Bradford W. Johnson . * Fixed TIS authentication to understand chalnecho response. Patch from Mark Horn . * Fixed typo in the ForcedPasswordChange configuration variable. Patch from Rick Troxel . * Documented ForcedPasswordChange, and changed its default value to yes. Added osf c2 code to use that option too. * Added SSH_BINDIR adding to PATH found from /etc/default/login etc. Patch from Georg-W. Koltermann . * AllowSHosts, DenySHosts patches from Piete Brooks . SSH === * Fixed -g option case clause (missing break). Patch from Kevin Steves . * Added check for program name to contain ssh1, ssh1.old, ssh.old, slogin1, slogin.old, slogin1.old. Bug report from Richard Kaszeta . SCP === * Added scp statistics print from Craig Yap . Added --disable-scp-stats to turn it off, and -q option to scp. CONFIGURE ========= * Fixed AC_CHECK_HEADER(socks.h) in the configure.in. Patch from Andrew Raphael . REMEMBER ======== * Ssh compilation success/failure web-page. You can fill in the reply form about your compilation at . You can query about the success/failure database from .