summaryrefslogtreecommitdiff
path: root/debian/patches/package-versioning.patch
diff options
context:
space:
mode:
Diffstat (limited to 'debian/patches/package-versioning.patch')
-rw-r--r--debian/patches/package-versioning.patch39
1 files changed, 25 insertions, 14 deletions
diff --git a/debian/patches/package-versioning.patch b/debian/patches/package-versioning.patch
index 392afc073..df97fa40f 100644
--- a/debian/patches/package-versioning.patch
+++ b/debian/patches/package-versioning.patch
@@ -1,17 +1,28 @@
1Description: Include the Debian version in our identification 1From da3ff9786c4c03b2aac4936b28f06b3c152e230d Mon Sep 17 00:00:00 2001
2 This makes it easier to audit networks for versions patched against 2From: Matthew Vernon <matthew@debian.org>
3 security vulnerabilities. It has little detrimental effect, as attackers 3Date: Sun, 9 Feb 2014 16:10:05 +0000
4 will generally just try attacks rather than bothering to scan for 4Subject: Include the Debian version in our identification
5 vulnerable-looking version strings. (However, see debian-banner.patch.) 5
6Author: Matthew Vernon <matthew@debian.org> 6This makes it easier to audit networks for versions patched against security
7vulnerabilities. It has little detrimental effect, as attackers will
8generally just try attacks rather than bothering to scan for
9vulnerable-looking version strings. (However, see debian-banner.patch.)
10
7Forwarded: not-needed 11Forwarded: not-needed
8Last-Update: 2013-09-14 12Last-Update: 2013-09-14
9 13
10Index: b/sshconnect.c 14Patch-Name: package-versioning.patch
11=================================================================== 15---
16 sshconnect.c | 4 ++--
17 sshd.c | 2 +-
18 version.h | 7 ++++++-
19 3 files changed, 9 insertions(+), 4 deletions(-)
20
21diff --git a/sshconnect.c b/sshconnect.c
22index bda83b2..ad960fd 100644
12--- a/sshconnect.c 23--- a/sshconnect.c
13+++ b/sshconnect.c 24+++ b/sshconnect.c
14@@ -442,10 +442,10 @@ 25@@ -442,10 +442,10 @@ send_client_banner(int connection_out, int minor1)
15 /* Send our own protocol version identification. */ 26 /* Send our own protocol version identification. */
16 if (compat20) { 27 if (compat20) {
17 xasprintf(&client_version_string, "SSH-%d.%d-%.100s\r\n", 28 xasprintf(&client_version_string, "SSH-%d.%d-%.100s\r\n",
@@ -24,11 +35,11 @@ Index: b/sshconnect.c
24 } 35 }
25 if (roaming_atomicio(vwrite, connection_out, client_version_string, 36 if (roaming_atomicio(vwrite, connection_out, client_version_string,
26 strlen(client_version_string)) != strlen(client_version_string)) 37 strlen(client_version_string)) != strlen(client_version_string))
27Index: b/sshd.c 38diff --git a/sshd.c b/sshd.c
28=================================================================== 39index fbe3284..7efa7ef 100644
29--- a/sshd.c 40--- a/sshd.c
30+++ b/sshd.c 41+++ b/sshd.c
31@@ -440,7 +440,7 @@ 42@@ -440,7 +440,7 @@ sshd_exchange_identification(int sock_in, int sock_out)
32 } 43 }
33 44
34 xasprintf(&server_version_string, "SSH-%d.%d-%.100s%s%s%s", 45 xasprintf(&server_version_string, "SSH-%d.%d-%.100s%s%s%s",
@@ -37,8 +48,8 @@ Index: b/sshd.c
37 *options.version_addendum == '\0' ? "" : " ", 48 *options.version_addendum == '\0' ? "" : " ",
38 options.version_addendum, newline); 49 options.version_addendum, newline);
39 50
40Index: b/version.h 51diff --git a/version.h b/version.h
41=================================================================== 52index 39033ed..036277d 100644
42--- a/version.h 53--- a/version.h
43+++ b/version.h 54+++ b/version.h
44@@ -3,4 +3,9 @@ 55@@ -3,4 +3,9 @@