HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011 Release Notes

New Features
This release of HP-UX Secure Shell is a defect-fix release and does not contain any new
features. See “Defects Fixed in OpenSSH4.5p1” and “Defect Fixed in HP-UX Secure
Shell A.04.50.009, A.04.50.010, and A.04.50.011” (page 8) for a list of defect fixes
included in this version of HP-UX Secure Shell.
Defects Fixed in OpenSSH4.5p1
Following are the defects fixed in OpenSSH4.5p1. HP-UX Secure Shell versions
A.04.50.009, A.04.50.010, and A.04.50.011 are based on OpenSSH4.5p1 and include
these defect fixes.
• Fixed a bug in the sshd privilege separation monitor that weakened its verification
of successful authentication.
• Fixed a bug where ssh connections to a Solaris machine were dropped if a process
started in the 1st ssh session was terminated in the 2nd session. Instead of
terminating only the process, the first session was also terminated.
For more information on these defect fixes, see the Bugzilla Website at:
http://bugzilla.mindrot.org.
Defect Fixed in HP-UX Secure Shell A.04.50.009, A.04.50.010, and
A.04.50.011
HP-UX Secure Shell versions A.04.50.009, A.04.50.010, and A.04.50.011 include the
following defect fix:
JAGag41959
When the ssh_chroot_setup.sh script is run and a user attempts
to sftp to the server, the following error message is displayed:
SSH -vvv:
...
debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes in 0.4
seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.0
debug1: Exit status 141
Connection closed
Known Problems and Workarounds
Following are the known problems and workarounds in HP-UX Secure Shell A.04.50.009,
A.04.50.010, and A.04.50.011:
• Do not specify user specific information during configuration of hostbased
authentication. Host-based Authentication supports only authentication of hosts.
It does not allow user-specific authentication. When, user configures the hostbased
authentication with the following commands:
# cat /etc/hosts.equiv
myhost.mydomain.com specificuser
8 HP-UX Secure Shell A.04.50.009, A.04.50.010, and A.04.50.011