HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011 Release Notes

ManualsBrandsHP ManualsSoftwareHP-UX 11i Secure Shell Software

HP-UX Secure Shell A.04.50.009,

A.04.50.010, and A.04.50.011

Release Notes

HP-UX 11i v1, 11i v2, and 11i v3

HP Part Number: 5992–1942

Published: September 2007

Summary of content (15 pages)

PAGE 1
HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.
PAGE 2
Legal Notices Copyright 2007 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
PAGE 3
Table of Contents 1 HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011 .................................................7 Announcement.....................................................................................................................7 Secure Shell Versions on HP-UX..........................................................................................7 New Features..................................................................................................................
PAGE 4
PAGE 5
List of Tables 1-1 1-2 1-3 1-4 1-5 Availability of Secure Shell Versions on HP-UX ..........................................................7 Scenarios where pam_setcred Generates Error Messages............................................9 System Requirements for Installing HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011...........................................................................................................11 Quality Packs for HP-UX Secure Shell on HP-UX Operating Systems...
PAGE 6
PAGE 7
1 HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011 This document discusses the most recent product information for HP-UX Secure Shell Versions A.04.50.009, A.04.50.010, and A.04.50.011 that are supported on HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3. This document addresses the following topics: • • • • • • • • • • • • “Secure Shell Versions on HP-UX” (page 7) “New Features” (page 8) “Defects Fixed in OpenSSH4.5p1” (page 8) “Defect Fixed in HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.
PAGE 8
New Features This release of HP-UX Secure Shell is a defect-fix release and does not contain any new features. See “Defects Fixed in OpenSSH4.5p1” and “Defect Fixed in HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011” (page 8) for a list of defect fixes included in this version of HP-UX Secure Shell. Defects Fixed in OpenSSH4.5p1 Following are the defects fixed in OpenSSH4.5p1. HP-UX Secure Shell versions A.04.50.009, A.04.50.010, and A.04.50.011 are based on OpenSSH4.
PAGE 9
It allows the specificuser@myhost.mydomain.com to login into any local account on the remote machine. • OpenSSH 4.5p1 base code has functionality to support logging of sftp transactions. LogFacility and LogLevel options are added to sftp-server as command-line options to log these transactions.
PAGE 10
Table 1-2 Scenarios where pam_setcred Generates Error Messages (continued) • User UsePriv KeyServ Running Error Messages non-root yes yes No message root no yes Permission denied non-root no yes Permission denied A Kerberos ticket on a Secure Shell server system gets inadvertently deleted in the following scenarios: 1. User U1 creates a Kerberos ticket file on a Secure Shell server system, S1. 2. The SSH server on S1 is set up for PAM_KERBEROS authentication. 3.
PAGE 11
If you are using HP-UX Secure Shell on HP-UX 11i v1, HP recommends that you install the Strong Random Number Generator product as it significantly speeds up program initialization and execution time for some commands. HP-UX Secure Shell Resources For more information about Secure Shell, read the following: • • • • HTML and pdf versions at http://docs.hp.com ( Internet and Security Solutions) A README text version in the software at: /opt/ssh/README.hp The HP Instant Information CD OpenSSH at http://www.
PAGE 12
Patch Requirements HP has tested HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011 with the Support Plus patches listed in Table 1-4. HP mandates that HP-UX 11i v1 customers must install these Support Plus patches.
PAGE 13
NOTE: The PHCO_33215 patch fixes a PAM-related issue. Without this patch, pam_acct_mgmt returned success messages on locked accounts. With this patch, account management fails for locked accounts (this is the appropriate behavior). In order to log in using ssh, users must unlock their accounts. HP-UX Secure Shell Software Availability HP-UX Secure Shell is available on the following: • • • • • HP Software Depot at: http://www.software.hp.
PAGE 14
8. Click Yes. The swinstall command loads the HP-UX Secure Shell files on the system in approximately 3 to 5 minutes. NOTE: The sshd daemon is preconfigured, and it is started after installation. The swinstall command installs HP-UX Secure Shell in the /opt/ssh/ directory. HP-UX Secure Shell and chroot Environments HP-UX Secure Shell versions A.04.50.009, A.04.50.010, and A.04.50.011 support chroot functionality for the ssh, sftp, and scp commands.
PAGE 15
Is libwrap.a linked in HP-UX Secure Shell? Must I only configure hosts.allow and hosts.deny to use the access control provided by tcp_wrapper? Yes, thelibwrap.a archive library consisting of tcp_wrapper version 7.6-ipv6.4, is linked to HP-UX Secure Shell. You only need to configure hosts.allow and hosts.deny to use the access control provided by tcp_wrapper. Is HP-UX Secure Shell vulnerable to the reported double free bug in the zlib compression algorithm documented at http://www.cert.