#SSH

OpenSSH 9.8 was released on July 1, 2024, fixing a critical race condition in sshd (regreSSHion) that could allow unauthenticated remote root code execution, splitting the server into separate binaries, and adding attacker penalties. Here is what changed.

OpenSSH 9.6 was released on December 18, 2023 with security fixes, most notably a 'strict KEX' extension mitigating the Terrapin attack on the SSH transport protocol, and a countermeasure against command injection via shell metacharacters. Here is what changed.

OpenSSH 9.5 was released on October 4, 2023. It added keystroke timing obfuscation to hide inter-keystroke timings, a new transport-level ping facility, and made ssh-keygen generate Ed25519 keys by default. Here is what changed.