summaryrefslogtreecommitdiff
path: root/ChangeLog
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2012-05-17 13:04:02 +0100
committerColin Watson <cjwatson@debian.org>2012-05-17 13:04:02 +0100
commitdd5ed53e20d218607260916a6b04d1c8c5b3d88f (patch)
treec59b4dbcc610f10700945f885adf3bddc2542c26 /ChangeLog
parent8241a65bf12ac53c1b7304bba7ce739aad80b8b8 (diff)
parentb9bc38990c5eb5d99e28ca5af6d3491fd4a0060a (diff)
merge 6.0p1
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog331
1 files changed, 331 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index ee6460d4d..5df76186d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,334 @@
120120420
2 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]
3 [contrib/suse/openssh.spec] Update for release 6.0
4 - (djm) [README] Update URL to release notes.
5 - (djm) Release openssh-6.0
6
720120419
8 - (djm) [configure.ac] Fix compilation error on FreeBSD, whose libutil
9 contains openpty() but not login()
10
1120120404
12 - (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandbox
13 mode for Linux's new seccomp filter; patch from Will Drewry; feedback
14 and ok dtucker@
15
1620120330
17 - (dtucker) [contrib/redhat/openssh.spec] Bug #1992: remove now-gone WARNING
18 file from spec file. From crighter at nuclioss com.
19 - (djm) [entropy.c] bz#1991: relax OpenSSL version test to allow running
20 openssh binaries on a newer fix release than they were compiled on.
21 with and ok dtucker@
22 - (djm) [openbsd-compat/bsd-cygwin_util.h] #undef _WIN32 to avoid incorrect
23 assumptions when building on Cygwin; patch from Corinna Vinschen
24
2520120309
26 - (djm) [openbsd-compat/port-linux.c] bz#1960: fix crash on SELinux
27 systems where sshd is run in te wrong context. Patch from Sven
28 Vermeulen; ok dtucker@
29 - (djm) [packet.c] bz#1963: Fix IPQoS not being set on non-mapped v4-in-v6
30 addressed connections. ok dtucker@
31
3220120224
33 - (dtucker) [audit-bsm.c configure.ac] bug #1968: enable workarounds for BSM
34 audit breakage in Solaris 11. Patch from Magnus Johansson.
35
3620120215
37 - (tim) [openbsd-compat/bsd-misc.h sshd.c] Fix conflicting return type for
38 unsetenv due to rev 1.14 change to setenv.c. Cast unsetenv to void in sshd.c
39 ok dtucker@
40 - (tim) [defines.h] move chunk introduced in 1.125 before MAXPATHLEN so
41 it actually works.
42 - (tim) [regress/keytype.sh] stderr redirection needs to be inside back quote
43 to work. Spotted by Angel Gonzalez
44
4520120214
46 - (djm) [openbsd-compat/bsd-cygwin_util.c] Add PROGRAMFILES to list of
47 preserved Cygwin environment variables; from Corinna Vinschen
48
4920120211
50 - (djm) OpenBSD CVS Sync
51 - djm@cvs.openbsd.org 2012/01/05 00:16:56
52 [monitor.c]
53 memleak on error path
54 - djm@cvs.openbsd.org 2012/01/07 21:11:36
55 [mux.c]
56 fix double-free in new session handler
57 - miod@cvs.openbsd.org 2012/01/08 13:17:11
58 [ssh-ecdsa.c]
59 Fix memory leak in ssh_ecdsa_verify(); from Loganaden Velvindron,
60 ok markus@
61 - miod@cvs.openbsd.org 2012/01/16 20:34:09
62 [ssh-pkcs11-client.c]
63 Fix a memory leak in pkcs11_rsa_private_encrypt(), reported by Jan Klemkow.
64 While there, be sure to buffer_clear() between send_msg() and recv_msg().
65 ok markus@
66 - dtucker@cvs.openbsd.org 2012/01/18 21:46:43
67 [clientloop.c]
68 Ensure that $DISPLAY contains only valid characters before using it to
69 extract xauth data so that it can't be used to play local shell
70 metacharacter games. Report from r00t_ati at ihteam.net, ok markus.
71 - markus@cvs.openbsd.org 2012/01/25 19:26:43
72 [packet.c]
73 do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during rekeying;
74 ok dtucker@, djm@
75 - markus@cvs.openbsd.org 2012/01/25 19:36:31
76 [authfile.c]
77 memleak in key_load_file(); from Jan Klemkow
78 - markus@cvs.openbsd.org 2012/01/25 19:40:09
79 [packet.c packet.h]
80 packet_read_poll() is not used anymore.
81 - markus@cvs.openbsd.org 2012/02/09 20:00:18
82 [version.h]
83 move from 6.0-beta to 6.0
84
8520120206
86 - (djm) [ssh-keygen.c] Don't fail in do_gen_all_hostkeys on platforms
87 that don't support ECC. Patch from Phil Oleson
88
8920111219
90 - OpenBSD CVS Sync
91 - djm@cvs.openbsd.org 2011/12/02 00:41:56
92 [mux.c]
93 fix bz#1948: ssh -f doesn't fork for multiplexed connection.
94 ok dtucker@
95 - djm@cvs.openbsd.org 2011/12/02 00:43:57
96 [mac.c]
97 fix bz#1934: newer OpenSSL versions will require HMAC_CTX_Init before
98 HMAC_init (this change in policy seems insane to me)
99 ok dtucker@
100 - djm@cvs.openbsd.org 2011/12/04 23:16:12
101 [mux.c]
102 revert:
103 > revision 1.32
104 > date: 2011/12/02 00:41:56; author: djm; state: Exp; lines: +4 -1
105 > fix bz#1948: ssh -f doesn't fork for multiplexed connection.
106 > ok dtucker@
107 it interacts badly with ControlPersist
108 - djm@cvs.openbsd.org 2011/12/07 05:44:38
109 [auth2.c dh.c packet.c roaming.h roaming_client.c roaming_common.c]
110 fix some harmless and/or unreachable int overflows;
111 reported Xi Wang, ok markus@
112
11320111125
114 - OpenBSD CVS Sync
115 - oga@cvs.openbsd.org 2011/11/16 12:24:28
116 [sftp.c]
117 Don't leak list in complete_cmd_parse if there are no commands found.
118 Discovered when I was ``borrowing'' this code for something else.
119 ok djm@
120
12120111121
122 - (dtucker) [configure.ac] Set _FORTIFY_SOURCE. ok djm@
123
12420111104
125 - (dtucker) OpenBSD CVS Sync
126 - djm@cvs.openbsd.org 2011/10/18 05:15:28
127 [ssh.c]
128 ssh(1): skip attempting to create ~/.ssh when -F is passed; ok markus@
129 - djm@cvs.openbsd.org 2011/10/18 23:37:42
130 [ssh-add.c]
131 add -k to usage(); reminded by jmc@
132 - djm@cvs.openbsd.org 2011/10/19 00:06:10
133 [moduli.c]
134 s/tmpfile/tmp/ to make this -Wshadow clean
135 - djm@cvs.openbsd.org 2011/10/19 10:39:48
136 [umac.c]
137 typo in comment; patch from Michael W. Bombardieri
138 - djm@cvs.openbsd.org 2011/10/24 02:10:46
139 [ssh.c]
140 bz#1943: unbreak stdio forwarding when ControlPersist is in user - ssh
141 was incorrectly requesting the forward in both the control master and
142 slave. skip requesting it in the master to fix. ok markus@
143 - djm@cvs.openbsd.org 2011/10/24 02:13:13
144 [session.c]
145 bz#1859: send tty break to pty master instead of (probably already
146 closed) slave side; "looks good" markus@
147 - dtucker@cvs.openbsd.org 011/11/04 00:09:39
148 [moduli]
149 regenerated moduli file; ok deraadt
150 - (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.in
151 openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/getrrsetbyname.c]
152 bz 1320: Add optional support for LDNS, a BSD licensed DNS resolver library
153 which supports DNSSEC. Patch from Simon Vallet (svallet at genoscope cns fr)
154 with some rework from myself and djm. ok djm.
155
15620111025
157 - (dtucker) [contrib/cygwin/Makefile] Continue if installing a doc file
158 fails. Patch from Corinna Vinschen.
159
16020111018
161 - (djm) OpenBSD CVS Sync
162 - djm@cvs.openbsd.org 2011/10/04 14:17:32
163 [sftp-glob.c]
164 silence error spam for "ls */foo" in directory with files; bz#1683
165 - dtucker@cvs.openbsd.org 2011/10/16 11:02:46
166 [moduli.c ssh-keygen.1 ssh-keygen.c]
167 Add optional checkpoints for moduli screening. feedback & ok deraadt
168 - jmc@cvs.openbsd.org 2011/10/16 15:02:41
169 [ssh-keygen.c]
170 put -K in the right place (usage());
171 - stsp@cvs.openbsd.org 2011/10/16 15:51:39
172 [moduli.c]
173 add missing includes to unbreak tree; fix from rpointel
174 - djm@cvs.openbsd.org 2011/10/18 04:58:26
175 [auth-options.c key.c]
176 remove explict search for \0 in packet strings, this job is now done
177 implicitly by buffer_get_cstring; ok markus
178 - djm@cvs.openbsd.org 2011/10/18 05:00:48
179 [ssh-add.1 ssh-add.c]
180 new "ssh-add -k" option to load plain keys (skipping certificates);
181 "looks ok" markus@
182
18320111001
184 - (dtucker) [openbsd-compat/mktemp.c] Fix compiler warning. ok djm
185 - (dtucker) OpenBSD CVS Sync
186 - dtucker@cvs.openbsd.org 2011/09/23 00:22:04
187 [channels.c auth-options.c servconf.c channels.h sshd.8]
188 Add wildcard support to PermitOpen, allowing things like "PermitOpen
189 localhost:*". bz #1857, ok djm markus.
190 - markus@cvs.openbsd.org 2011/09/23 07:45:05
191 [mux.c readconf.h channels.h compat.h compat.c ssh.c readconf.c channels.c
192 version.h]
193 unbreak remote portforwarding with dynamic allocated listen ports:
194 1) send the actual listen port in the open message (instead of 0).
195 this allows multiple forwardings with a dynamic listen port
196 2) update the matching permit-open entry, so we can identify where
197 to connect to
198 report: den at skbkontur.ru and P. Szczygielski
199 feedback and ok djm@
200 - djm@cvs.openbsd.org 2011/09/25 05:44:47
201 [auth2-pubkey.c]
202 improve the AuthorizedPrincipalsFile debug log message to include
203 file and line number
204 - dtucker@cvs.openbsd.org 2011/09/30 00:47:37
205 [sshd.c]
206 don't attempt privsep cleanup when not using privsep; ok markus@
207 - djm@cvs.openbsd.org 2011/09/30 21:22:49
208 [sshd.c]
209 fix inverted test that caused logspam; spotted by henning@
210
21120110929
212 - (djm) [configure.ac defines.h] No need to detect sizeof(char); patch
213 from des AT des.no
214 - (dtucker) [configure.ac openbsd-compat/Makefile.in
215 openbsd-compat/strnlen.c] Add strnlen to the compat library.
216
21720110923
218 - (djm) [openbsd-compat/getcwd.c] Remove OpenBSD rcsid marker since we no
219 longer want to sync this file (OpenBSD uses a __getcwd syscall now, we
220 want this longhand version)
221 - (djm) [openbsd-compat/getgrouplist.c] Remove OpenBSD rcsid marker: the
222 upstream version is YPified and we don't want this
223 - (djm) [openbsd-compat/mktemp.c] forklift upgrade to -current version.
224 The file was totally rewritten between what we had in tree and -current.
225 - (djm) [openbsd-compat/sha2.c openbsd-compat/sha2.h] Remove OpenBSD rcsid
226 marker. The upstream API has changed (function and structure names)
227 enough to put it out of sync with other providers of this interface.
228 - (djm) [openbsd-compat/setenv.c] Forklift upgrade, including inclusion
229 of static __findenv() function from upstream setenv.c
230 - OpenBSD CVS Sync
231 - millert@cvs.openbsd.org 2006/05/05 15:27:38
232 [openbsd-compat/strlcpy.c]
233 Convert do {} while loop -> while {} for clarity. No binary change
234 on most architectures. From Oliver Smith. OK deraadt@ and henning@
235 - tobias@cvs.openbsd.org 2007/10/21 11:09:30
236 [openbsd-compat/mktemp.c]
237 Comment fix about time consumption of _gettemp.
238 FreeBSD did this in revision 1.20.
239 OK deraadt@, krw@
240 - deraadt@cvs.openbsd.org 2008/07/22 21:47:45
241 [openbsd-compat/mktemp.c]
242 use arc4random_uniform(); ok djm millert
243 - millert@cvs.openbsd.org 2008/08/21 16:54:44
244 [openbsd-compat/mktemp.c]
245 Remove useless code, the kernel will set errno appropriately if an
246 element in the path does not exist. OK deraadt@ pvalchev@
247 - otto@cvs.openbsd.org 2008/12/09 19:38:38
248 [openbsd-compat/inet_ntop.c]
249 fix inet_ntop(3) prototype; ok millert@ libc to be bumbed very soon
250
25120110922
252 - OpenBSD CVS Sync
253 - pyr@cvs.openbsd.org 2011/05/12 07:15:10
254 [openbsd-compat/glob.c]
255 When the max number of items for a directory has reached GLOB_LIMIT_READDIR
256 an error is returned but closedir() is not called.
257 spotted and fix provided by Frank Denis obsd-tech@pureftpd.org
258 ok otto@, millert@
259 - stsp@cvs.openbsd.org 2011/09/20 10:18:46
260 [glob.c]
261 In glob(3), limit recursion during matching attempts. Similar to
262 fnmatch fix. Also collapse consecutive '*' (from NetBSD).
263 ok miod deraadt
264 - djm@cvs.openbsd.org 2011/09/22 06:27:29
265 [glob.c]
266 fix GLOB_KEEPSTAT without GLOB_NOSORT; the implicit sort was being
267 applied only to the gl_pathv vector and not the corresponding gl_statv
268 array. reported in OpenSSH bz#1935; feedback and okay matthew@
269 - djm@cvs.openbsd.org 2011/08/26 01:45:15
270 [ssh.1]
271 Add some missing ssh_config(5) options that can be used in ssh(1)'s
272 -o argument. Patch from duclare AT guu.fi
273 - djm@cvs.openbsd.org 2011/09/05 05:56:13
274 [scp.1 sftp.1]
275 mention ControlPersist and KbdInteractiveAuthentication in the -o
276 verbiage in these pages too (prompted by jmc@)
277 - djm@cvs.openbsd.org 2011/09/05 05:59:08
278 [misc.c]
279 fix typo in IPQoS parsing: there is no "AF14" class, but there is
280 an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk
281 - jmc@cvs.openbsd.org 2011/09/05 07:01:44
282 [scp.1]
283 knock out a useless Ns;
284 - deraadt@cvs.openbsd.org 2011/09/07 02:18:31
285 [ssh-keygen.1]
286 typo (they vs the) found by Lawrence Teo
287 - djm@cvs.openbsd.org 2011/09/09 00:43:00
288 [ssh_config.5 sshd_config.5]
289 fix typo in IPQoS parsing: there is no "AF14" class, but there is
290 an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk
291 - djm@cvs.openbsd.org 2011/09/09 00:44:07
292 [PROTOCOL.mux]
293 MUX_C_CLOSE_FWD includes forward type in message (though it isn't
294 implemented anyway)
295 - djm@cvs.openbsd.org 2011/09/09 22:37:01
296 [scp.c]
297 suppress adding '--' to remote commandlines when the first argument
298 does not start with '-'. saves breakage on some difficult-to-upgrade
299 embedded/router platforms; feedback & ok dtucker ok markus
300 - djm@cvs.openbsd.org 2011/09/09 22:38:21
301 [sshd.c]
302 kill the preauth privsep child on fatal errors in the monitor;
303 ok markus@
304 - djm@cvs.openbsd.org 2011/09/09 22:46:44
305 [channels.c channels.h clientloop.h mux.c ssh.c]
306 support for cancelling local and remote port forwards via the multiplex
307 socket. Use ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host" to request
308 the cancellation of the specified forwardings; ok markus@
309 - markus@cvs.openbsd.org 2011/09/10 22:26:34
310 [channels.c channels.h clientloop.c ssh.1]
311 support cancellation of local/dynamic forwardings from ~C commandline;
312 ok & feedback djm@
313 - okan@cvs.openbsd.org 2011/09/11 06:59:05
314 [ssh.1]
315 document new -O cancel command; ok djm@
316 - markus@cvs.openbsd.org 2011/09/11 16:07:26
317 [sftp-client.c]
318 fix leaks in do_hardlink() and do_readlink(); bz#1921
319 from Loganaden Velvindron
320 - markus@cvs.openbsd.org 2011/09/12 08:46:15
321 [sftp-client.c]
322 fix leak in do_lsreaddir(); ok djm
323 - djm@cvs.openbsd.org 2011/09/22 06:29:03
324 [sftp.c]
325 don't let remote_glob() implicitly sort its results in do_globbed_ls() -
326 in all likelihood, they will be resorted anyway
327
32820110909
329 - (dtucker) [entropy.h] Bug #1932: remove old definition of init_rng. From
330 Colin Watson.
331
120110906 33220110906
2 - (djm) [README version.h] Correct version 333 - (djm) [README version.h] Correct version
3 - (djm) [contrib/redhat/openssh.spec] Correct restorcon => restorecon 334 - (djm) [contrib/redhat/openssh.spec] Correct restorcon => restorecon