diff options
Diffstat (limited to 'debian/patches/package-versioning.patch')
-rw-r--r-- | debian/patches/package-versioning.patch | 39 |
1 files changed, 25 insertions, 14 deletions
diff --git a/debian/patches/package-versioning.patch b/debian/patches/package-versioning.patch index 392afc073..df97fa40f 100644 --- a/debian/patches/package-versioning.patch +++ b/debian/patches/package-versioning.patch | |||
@@ -1,17 +1,28 @@ | |||
1 | Description: Include the Debian version in our identification | 1 | From da3ff9786c4c03b2aac4936b28f06b3c152e230d Mon Sep 17 00:00:00 2001 |
2 | This makes it easier to audit networks for versions patched against | 2 | From: Matthew Vernon <matthew@debian.org> |
3 | security vulnerabilities. It has little detrimental effect, as attackers | 3 | Date: Sun, 9 Feb 2014 16:10:05 +0000 |
4 | will generally just try attacks rather than bothering to scan for | 4 | Subject: Include the Debian version in our identification |
5 | vulnerable-looking version strings. (However, see debian-banner.patch.) | 5 | |
6 | Author: Matthew Vernon <matthew@debian.org> | 6 | This makes it easier to audit networks for versions patched against security |
7 | vulnerabilities. It has little detrimental effect, as attackers will | ||
8 | generally just try attacks rather than bothering to scan for | ||
9 | vulnerable-looking version strings. (However, see debian-banner.patch.) | ||
10 | |||
7 | Forwarded: not-needed | 11 | Forwarded: not-needed |
8 | Last-Update: 2013-09-14 | 12 | Last-Update: 2013-09-14 |
9 | 13 | ||
10 | Index: b/sshconnect.c | 14 | Patch-Name: package-versioning.patch |
11 | =================================================================== | 15 | --- |
16 | sshconnect.c | 4 ++-- | ||
17 | sshd.c | 2 +- | ||
18 | version.h | 7 ++++++- | ||
19 | 3 files changed, 9 insertions(+), 4 deletions(-) | ||
20 | |||
21 | diff --git a/sshconnect.c b/sshconnect.c | ||
22 | index bda83b2..ad960fd 100644 | ||
12 | --- a/sshconnect.c | 23 | --- a/sshconnect.c |
13 | +++ b/sshconnect.c | 24 | +++ b/sshconnect.c |
14 | @@ -442,10 +442,10 @@ | 25 | @@ -442,10 +442,10 @@ send_client_banner(int connection_out, int minor1) |
15 | /* Send our own protocol version identification. */ | 26 | /* Send our own protocol version identification. */ |
16 | if (compat20) { | 27 | if (compat20) { |
17 | xasprintf(&client_version_string, "SSH-%d.%d-%.100s\r\n", | 28 | xasprintf(&client_version_string, "SSH-%d.%d-%.100s\r\n", |
@@ -24,11 +35,11 @@ Index: b/sshconnect.c | |||
24 | } | 35 | } |
25 | if (roaming_atomicio(vwrite, connection_out, client_version_string, | 36 | if (roaming_atomicio(vwrite, connection_out, client_version_string, |
26 | strlen(client_version_string)) != strlen(client_version_string)) | 37 | strlen(client_version_string)) != strlen(client_version_string)) |
27 | Index: b/sshd.c | 38 | diff --git a/sshd.c b/sshd.c |
28 | =================================================================== | 39 | index fbe3284..7efa7ef 100644 |
29 | --- a/sshd.c | 40 | --- a/sshd.c |
30 | +++ b/sshd.c | 41 | +++ b/sshd.c |
31 | @@ -440,7 +440,7 @@ | 42 | @@ -440,7 +440,7 @@ sshd_exchange_identification(int sock_in, int sock_out) |
32 | } | 43 | } |
33 | 44 | ||
34 | xasprintf(&server_version_string, "SSH-%d.%d-%.100s%s%s%s", | 45 | xasprintf(&server_version_string, "SSH-%d.%d-%.100s%s%s%s", |
@@ -37,8 +48,8 @@ Index: b/sshd.c | |||
37 | *options.version_addendum == '\0' ? "" : " ", | 48 | *options.version_addendum == '\0' ? "" : " ", |
38 | options.version_addendum, newline); | 49 | options.version_addendum, newline); |
39 | 50 | ||
40 | Index: b/version.h | 51 | diff --git a/version.h b/version.h |
41 | =================================================================== | 52 | index 39033ed..036277d 100644 |
42 | --- a/version.h | 53 | --- a/version.h |
43 | +++ b/version.h | 54 | +++ b/version.h |
44 | @@ -3,4 +3,9 @@ | 55 | @@ -3,4 +3,9 @@ |