Providing a kill switch for scp to deal with CVE-2020-15778
22870

Fix Terrapin attack
19308

Fix Terrapin attack
19308
Forbid shell metasymbols in username/hostname
19788

Using DigestSign/DigestVerify functions for better FIPS compatibility
5217

Limit artificial delays in sshd while login using AD user
1684
Add comment to OpenSSH server config about FIPS-incompatible key
5221
Avoid killing all processes on system in case of race condition
11548
Avoid sshd_config 256K limit
5279
Using DigestSign/DigestVerify functions for better FIPS compatibility
5217
Fix GSS KEX causing ssh failures when connecting to WinSSHD
5321

rebuilt
2023-38408

Avoid remote code execution in ssh-agent PKCS#11 support
2023-38408

Fix parsing of IPv6 IPs in sftp client (#2151334)
Avoid ssh banner one-byte overflow (#2138344)
Avoid crash of sshd when Include folder does not exist (#2133087)

Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)

Fix new issues found by static analyzers

Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
Include caveat for crypto-policy in sshd manpage (#2044354)
Change log level of FIPS specific log message to verbose (#2050511)
Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)

Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)

Add support for "Include" directive in sshd_config file (#1926103)

CVE-2021-41617 upstream fix (#2008885)

sshd -T requires -C when "Match" is used in sshd_config (#1836277)

CVE-2020-14145 openssh: Observable Discrepancy leading to an information
Hostbased ssh authentication fails if session ID contains a '/' (#1944125)