Ssh 1.2.24 release notes

SECURITY
========

* Added crc-fix detection code from CORE SDI S.A., Buenos Aires,
 Argentina. See their security announcement for more information.


SSHD
====

* Added time and date in the X11 connection rejected message
 requested by Jarkko Hietaniemi <[email protected]>.

* Added username to passwd command when forcing password change.

* Disabled SO_LINGER by default. Added --enable-so-linger
 configure option that turns it on again.

* Added user@host pattern matching in Allow/DenyUsers. Patch from
 Andrew Tridgell <[email protected]>.

* Added run time check for /var/X directory. Patch from Charles
 Karney <[email protected]>.

* Added warning about expiring passwords. Also added warning
 message when the account is going to expire. Idea from Harry
 Shamansky <[email protected]>. Added PasswordExpireWarningDays
 and AccountExpireWarningDays server configuration variables.

* Fixed login_getclass code for BSDI 2.1 (199510). Patch from
 Kazunori ANDO <[email protected]>.

* Fixed defining X11_DIR in the configure.in. Patch from Bradford
 W. Johnson <[email protected]>.

* Fixed TIS authentication to understand chalnecho response. Patch
 from Mark Horn <[email protected]>.

* Fixed typo in the ForcedPasswordChange configuration variable.
 Patch from Rick Troxel <[email protected]>.

* Documented ForcedPasswordChange, and changed its default value
 to yes. Added osf c2 code to use that option too.

* Added SSH_BINDIR adding to PATH found from /etc/default/login
 etc. Patch from Georg-W. Koltermann <[email protected]>.

* AllowSHosts, DenySHosts patches from Piete Brooks
 <[email protected]>.


SSH
===

* Fixed -g option case clause (missing break). Patch from Kevin
 Steves <[email protected]>.

* Added check for program name to contain ssh1, ssh1.old, ssh.old,
 slogin1, slogin.old, slogin1.old. Bug report from Richard Kaszeta
 <[email protected]>.


SCP
===

* Added scp statistics print from Craig Yap <[email protected]>.
 Added --disable-scp-stats to turn it off, and -q option to scp.


CONFIGURE
=========

* Fixed AC_CHECK_HEADER(socks.h) in the configure.in. Patch from
 Andrew Raphael <[email protected]>.


REMEMBER
========

* Ssh compilation success/failure web-page. You can fill in the reply
 form about your compilation at
 <URL:http://www.ssh.net/ssh_form.html>. You can query about the
 success/failure database from
 <URL:http://www.ssh.net/ssh_query.html>.