import openssh-5.2p1-gsskex-all-20090726.patch

1 files changed, 20 insertions, 0 deletions

diff --git a/ChangeLog.gssapi b/ChangeLog.gssapi
index 5c110d0d8..927b98bc9 100644
--- a/ChangeLog.gssapi
+++ b/ChangeLog.gssapi
@@ -1,3 +1,23 @@
+20090615
+  - [ gss-genr.c gss-serv.c kexgssc.c kexgsss.c monitor.c sshconnect2.c
+      sshd.c ]
+    Fix issues identified by Greg Hudson following a code review
+        Check return value of gss_indicate_mechs
+        Protect GSSAPI calls in monitor, so they can only be used if enabled
+        Check return values of bignum functions in key exchange
+        Use BN_clear_free to clear other side's DH value
+        Make ssh_gssapi_id_kex more robust
+        Only configure kex table pointers if GSSAPI is enabled
+        Don't leak mechanism list, or gss mechanism list
+        Cast data.length before printing
+        If serverkey isn't provided, use an empty string, rather than NULL
+
+20090201
+  - [ gss-genr.c gss-serv.c kex.h kexgssc.c readconf.c readconf.h ssh-gss.h
+      ssh_config.5 sshconnet2.c ]
+    Add support for the GSSAPIClientIdentity option, which allows the user
+    to specify which GSSAPI identity to use to contact a given server
+
 20080404
   - [ gss-serv.c ]
     Add code to actually implement GSSAPIStrictAcceptCheck, which had somehow