Ssh 1.2.24 release notes

SECURITY
========

* Added crc-fix detection code from CORE SDI S.A., Buenos Aires,
  Argentina. See their security announcement for more information. 


SSHD
====

* Added time and date in the X11 connection rejected message
  requested by Jarkko Hietaniemi <jhi@iki.fi>.

* Added username to passwd command when forcing password change.

* Disabled SO_LINGER by default. Added --enable-so-linger
  configure option that turns it on again.

* Added user@host pattern matching in Allow/DenyUsers. Patch from
  Andrew Tridgell <tridge@samba.anu.edu.au>.

* Added run time check for /var/X directory. Patch from Charles
  Karney <karney@pppl.gov>.

* Added warning about expiring passwords. Also added warning
  message when the account is going to expire. Idea from Harry
  Shamansky <shamansky@adinc.com>. Added PasswordExpireWarningDays
  and AccountExpireWarningDays server configuration variables. 

* Fixed login_getclass code for BSDI 2.1 (199510). Patch from
  Kazunori ANDO <ando@iij-mc.co.jp>.

* Fixed defining X11_DIR in the configure.in. Patch from Bradford
  W. Johnson <bradford@math.umn.edu>.

* Fixed TIS authentication to understand chalnecho response. Patch
  from Mark Horn <mhorn@funb.com>.

* Fixed typo in the ForcedPasswordChange configuration variable.
  Patch from Rick Troxel <rick@helix.nih.gov>.

* Documented ForcedPasswordChange, and changed its default value
  to yes. Added osf c2 code to use that option too. 

* Added SSH_BINDIR adding to PATH found from /etc/default/login
  etc. Patch from Georg-W. Koltermann <gwk@cray.com>.

* AllowSHosts, DenySHosts patches from Piete Brooks
  <pb@cl.cam.ac.uk>.


SSH
===

* Fixed -g option case clause (missing break). Patch from Kevin
  Steves <stevesk@sweden.hp.com>.

* Added check for program name to contain ssh1, ssh1.old, ssh.old,
  slogin1, slogin.old, slogin1.old. Bug report from Richard Kaszeta
  <kaszeta@me.umn.edu>.


SCP
===

* Added scp statistics print from Craig Yap <craig@cse.fau.edu>.
  Added --disable-scp-stats to turn it off, and -q option to scp. 


CONFIGURE
=========

* Fixed AC_CHECK_HEADER(socks.h) in the configure.in. Patch from
  Andrew Raphael <raphael@research.canon.com.au>.


REMEMBER
========
	
* Ssh compilation success/failure web-page. You can fill in the reply
  form about your compilation at
  <URL:http://www.ssh.net/ssh_form.html>. You can query about the
  success/failure database from
  <URL:http://www.ssh.net/ssh_query.html>.