HP-UX Secure Shell A.06.20.004, A.06.20.005, and A.06.20.006 Release Notes (5900-3159, July 2013)

HP-UX Secure Shell version A.06.20 is built with the following libraries:
• zlib V1.2.3
• OpenSSL v0.9.8y — For HP-UX 11i V3, OpenSSL is a shared library
• TCP Wrappers V7.6-ipv6.4
Secure Shell versions on HP-UX
Table 1 lists the versions of HP-UX Secure Shell products available for HP-UX 11i V1, HP-UX 11i
V2, and HP-UX 11i V3.
Table 1 Availability of Secure Shell Versions on HP-UX
VersionSupported Operating System
HP-UX Secure Shell version A.06.20.004HP-UX 11i V1
HP-UX Secure Shell version A.06.20.005HP-UX 11i V2
HP-UX Secure Shell version A.06.20.006HP-UX 11i V3
Support notice
HP provides software technical support for HP-UX Secure Shell for the latest, currently shipping
version, and the previous version of the product.
New features
HP-UX Secure Shell version A.06.20 is based on OpenSSH 6.2p2. A number of features have
been added. The new features of OpenSSH are available at http://www.openssh.org/txt/
release-6.2p2 and http://www.openssh.org/txt/release-6.2
Support for the Sftpfilecontrol patch
HP-UX Secure Shell supports the Sftpfilecontrol patch. This patch enables administrators to
set the umask on sftp sessions and to control the issue of chown and chmod commands in an
sftp session. As a result, the following server configuration directives (/opt/ssh/etc/
sshd_config) related to Sftpfilecontrol are supported in this release:
• #SftpUmask
• #SftpPermitChmod yes
• #SftpPermitChown yes
This patch supersedes the sftplogging patch for HP-UX Secure Shell versions A.04.50 and
higher.
Defects fixed in OpenSSH 6.2p2
The HP-UX Secure Shell version A.06.20 is based on OpenSSH 6.2p2 and includes the defect
fixes mentioned in http://www.openssh.org/txt/release-6.2p2 and http://www.openssh.org/txt/
release-6.2
OpenSSH 6.2p2 also includes fixes for some security vulnerabilities.
For more information on these defect fixes, see the Bugzilla website at: http://bugzilla.mindrot.org.
Defects fixed in HP-UX Secure Shell A.06.20.004, A.06.20.005, and
A.06.20.006
Removed dependency on Kerberos client (KRB5CLIENT) product, which was introduced in HP-UX
Secure Shell A.06.20.001, A.06.20.002 and A.06.20.003.
Secure Shell versions on HP-UX 5