Using DigestSign/DigestVerify functions for better FIPS compatibility
5217

Limit artificial delays in sshd while login using AD user
1684
Add comment to OpenSSH server config about FIPS-incompatible key
5221
Avoid killing all processes on system in case of race condition
11548
Avoid sshd_config 256K limit
5279
Using DigestSign/DigestVerify functions for better FIPS compatibility
5217
Fix GSS KEX causing ssh failures when connecting to WinSSHD
5321

rebuilt
2023-38408

Avoid remote code execution in ssh-agent PKCS#11 support
2023-38408

Fix parsing of IPv6 IPs in sftp client (#2151334)
Avoid ssh banner one-byte overflow (#2138344)
Avoid crash of sshd when Include folder does not exist (#2133087)

Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)

Fix new issues found by static analyzers

Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
Include caveat for crypto-policy in sshd manpage (#2044354)
Change log level of FIPS specific log message to verbose (#2050511)
Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)

Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)

Add support for "Include" directive in sshd_config file (#1926103)

CVE-2021-41617 upstream fix (#2008885)

sshd -T requires -C when "Match" is used in sshd_config (#1836277)

CVE-2020-14145 openssh: Observable Discrepancy leading to an information
Hostbased ssh authentication fails if session ID contains a '/' (#1944125)

ssh doesn't restore the blocking mode on standard output (#1942901)

SFTP sort upon the modification time (#1909988)
ssh-keygen printing fingerprint issue with Windows keys (#1901518)
PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
sshd provides PAM an incorrect error code (#1879503)

Openssh client window fix (#1913041)