OpenSSH, OpenSSL, zlib (5733-SC1)

The following changes for IBM® i 7.5 should be considered.

OpenSSH

OpenSSH is upgraded to version 8.6p1. Refer to http://www.openssh.com/releasenotes.html for potential incompatibilities.

Message catalog files are no longer supported. /QOpenSys/QIBM/ProdData/SC1/OpenSSH/msg is removed.

The following IBM i specific parameters are deprecated. They will be removed from sshd_config and migrated to a separate file in a future release.

  • ibmpaseforicntryid
  • ibmpaseforilangid
  • ibmpaseforienv

OpenSSL

OpenSSL is upgraded to version 1.1.1.

The following libraries are updated to include both 32-bit and 64-bit library support:
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/lib/libssl.so.1.1
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/lib/libcrypto.so.1.1
The following libraries are upgraded from 1.0.2 to 1.1.1. Applications linked with these two libraries require recompilation. They also are not recommended to be used. They will be removed in a future release, since they are the same level as lib*.so.1.1. Refer to https://www.ibm.com/support/pages/node/1136584 for recommendations.
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/lib/libssl.a
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/lib/libcrypto.a
The following scripts are now removed:
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/misc/c_hash
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/misc/c_info
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/misc/c_issuer
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/misc/c_name
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/misc/tsgetgen
  • /QOpenSys/QIBM/ProdData/SC1/OpenSSL/misc/CA.sh

zlib

zlib is upgraded to version 1.2.11. Refer to https://zlib.net for change logs.