diff options
Diffstat (limited to 'debian/changelog')
-rw-r--r-- | debian/changelog | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 06ec4ab09..e77d3462a 100644 --- a/debian/changelog +++ b/debian/changelog | |||
@@ -129,6 +129,12 @@ openssh (1:6.9p1-1) UNRELEASED; urgency=medium | |||
129 | SendEnv and AcceptEnv; bz#2386 | 129 | SendEnv and AcceptEnv; bz#2386 |
130 | - sshd(8): Format UsePAM setting when using sshd -T (closes: #767648). | 130 | - sshd(8): Format UsePAM setting when using sshd -T (closes: #767648). |
131 | - moduli(5): Update DH-GEX moduli (closes: #787037). | 131 | - moduli(5): Update DH-GEX moduli (closes: #787037). |
132 | * There are some things I want to fix before upgrading to 7.0p1, though I | ||
133 | intend to do that soon. In the meantime, backport security patches: | ||
134 | - SECURITY: sshd(8): OpenSSH 6.8 and 6.9 incorrectly set TTYs to be | ||
135 | world-writable. Local attackers may be able to write arbitrary | ||
136 | messages to logged-in users, including terminal escape sequences. | ||
137 | Reported by Nikolay Edigaryev. | ||
132 | * Thanks to Jakub Jelen of Red Hat for Fedora's rebased version of the | 138 | * Thanks to Jakub Jelen of Red Hat for Fedora's rebased version of the |
133 | GSSAPI key exchange patch. | 139 | GSSAPI key exchange patch. |
134 | 140 | ||