Contributed by Peter N. M. Hansteen on from the SSH! A more perfect 10 dept.
This is a bugfix release that supersedes the previously announced OpenSSH 10.1 in time for the general release.
From the release notes:
Changes since OpenSSH 10.1 ========================== This is a bugfix release, primarily to fix a problem that rendered ssh(1) unusable when ControlPersist was enabled.
Bugfixes -------- * ssh(1): fix mishandling of terminal connections when ControlPersist was active that rendered the session unusable. bz3872 * ssh-keygen(1): fix download of keys from PKCS#11 tokens. * ssh-keygen(1): fix CA signing operations when the CA key is held in a ssh-agent(1). bz3877 Portability ----------- * All: support platforms without mmap(2), e.g. WASM builds such as https://hterm.org * All: fix builds on FreeBSD for missing fnctl.h include. * All: fix builds on MacOS <10.12 Sierra, which lacks clock_gettime(3) * sshd(8): don't PAM_RHOST if the remote host is the "UNKNOWN" placeholder name. Avoids potential hangs in some PAM modules as they try to resolve it. Note, sshd(8) only uses the "UNKNOWN" name when the connection is not on an IPv4 or IPv6 socket.
See the OpenSSH 10.2 release notes for full details on the release.