Aside from the standard fixes, this package contains the following modifications of the hardcoded defaults: ssh/sshd Protocol: old: 2,1 new: 2 ssh/sshd Cipher: old: 3des new: blowfish ssh/sshd Ciphers: old: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se new: aes256-ctr,aes192-ctr,aes128-ctr,arcfour256,arcfour128,blowfish-cbc,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,cast128-cbc,arcfour,rijndael-cbc@lysator.liu.se ssh/sshd environment passing: old: new: LANG LANGUAGE LC_* sshd SyslogFacility: old: AUTH new: AUTHPRIV sshd PermitRootLogin: old: yes new: without-password sshd MaxStartups: old: 10 new: 10:30:20 sshd ChallengeResponseAuthentication: old: yes new: no sshd UsePAM: old: no new: yes sshd X11Forwarding: old: no new: yes sshd sftp subsystem: old: enabled new: disabled