HP-UX Secure Shell A.05.20.013, A.05.20.014, and A.05.20.015 Release Notes

1 HP-UX Secure Shell A.05.20
This document discusses the most recent product information for HP-UX Secure Shell versions
A.05.20.013, A.05.20.014, and A.05.20.015 that are supported on HP-UX 11i v1, HP-UX 11i v2,
and HP-UX 11i v3 respectively. This document addresses the following topics:
“Secure Shell Versions on HP-UX” (page 5)
“New Features” (page 5)
“Defects Fixed in OpenSSH5.2p1” (page 6)
“Defects Fixed in HP-UX Secure Shell A.05.20” (page 6)
“Known Problems and Workarounds” (page 7)
“HP-UX Secure Shell and the Strong Random Number Generator (page 8)
“HP-UX Secure Shell Resources” (page 8)
“Prerequisites” (page 9)
“HP-UX Secure Shell Software Availability” (page 10)
“Installing HP-UX Secure Shell” (page 10)
“HP-UX Secure Shell and chroot Environments” (page 11)
“Frequently Asked Questions (FAQ)” (page 11)
Announcement
HP-UX Secure Shell version A.05.20 is based on OpenSSH 5.2p1. HP-UX Secure Shell supports
the SSH-1 and SSH-2 protocols and provides secured remote login, file transfer, and remote
command execution.
Secure Shell Versions on HP-UX
Table 1-1 lists the versions of HP-UX Secure Shell products available for HP-UX 11i v1, HP-UX
11i v2, and HP-UX 11i v3.
Table 1-1 Availability of Secure Shell Versions on HP-UX
VersionSupported Operating System
HP-UX Secure Shell version A.05.20.013HP-UX 11i v1
HP-UX Secure Shell version A.05.20.014HP-UX 11i v2
HP-UX Secure Shell version A.05.20.015HP-UX 11i v3
Support Notice
HP provides software technical support for HP-UX Secure Shell for the latest, currently shipping
version and the immediately prior version of the product.
New Features
The following new features are introduced in OpenSSH5.2p1. HP-UX Secure Shell versions
A.05.20 is based on OpenSSH5.2p1 and include the following new features:
HP-UX Secure Shell 5.2 is linked with OpenSSL A.00.09.8k instead of OpenSSL A.00.09.8j.
A new option is added to ensure logs are directed to syslog instead of stderr.
The sshd_config(5) ForceCommand directive accepts command-line arguments for the
internal-sftp server.
The ssh(1) ~C escape command-line supports runtime creation of the dynamic (-D) port
forwards.
Announcement 5