diff options
Diffstat (limited to 'debian/patches/ssh-vulnkey.patch')
-rw-r--r-- | debian/patches/ssh-vulnkey.patch | 28 |
1 files changed, 14 insertions, 14 deletions
diff --git a/debian/patches/ssh-vulnkey.patch b/debian/patches/ssh-vulnkey.patch index d60816d46..c13cb3412 100644 --- a/debian/patches/ssh-vulnkey.patch +++ b/debian/patches/ssh-vulnkey.patch | |||
@@ -130,7 +130,7 @@ Index: b/auth.c | |||
130 | #include "auth.h" | 130 | #include "auth.h" |
131 | #include "auth-options.h" | 131 | #include "auth-options.h" |
132 | #include "canohost.h" | 132 | #include "canohost.h" |
133 | @@ -606,10 +607,34 @@ | 133 | @@ -608,10 +609,34 @@ |
134 | 134 | ||
135 | /* Returns 1 if key is revoked by revoked_keys_file, 0 otherwise */ | 135 | /* Returns 1 if key is revoked by revoked_keys_file, 0 otherwise */ |
136 | int | 136 | int |
@@ -462,7 +462,7 @@ Index: b/servconf.c | |||
462 | =================================================================== | 462 | =================================================================== |
463 | --- a/servconf.c | 463 | --- a/servconf.c |
464 | +++ b/servconf.c | 464 | +++ b/servconf.c |
465 | @@ -104,6 +104,7 @@ | 465 | @@ -107,6 +107,7 @@ |
466 | options->password_authentication = -1; | 466 | options->password_authentication = -1; |
467 | options->kbd_interactive_authentication = -1; | 467 | options->kbd_interactive_authentication = -1; |
468 | options->challenge_response_authentication = -1; | 468 | options->challenge_response_authentication = -1; |
@@ -470,7 +470,7 @@ Index: b/servconf.c | |||
470 | options->permit_empty_passwd = -1; | 470 | options->permit_empty_passwd = -1; |
471 | options->permit_user_env = -1; | 471 | options->permit_user_env = -1; |
472 | options->use_login = -1; | 472 | options->use_login = -1; |
473 | @@ -242,6 +243,8 @@ | 473 | @@ -246,6 +247,8 @@ |
474 | options->kbd_interactive_authentication = 0; | 474 | options->kbd_interactive_authentication = 0; |
475 | if (options->challenge_response_authentication == -1) | 475 | if (options->challenge_response_authentication == -1) |
476 | options->challenge_response_authentication = 1; | 476 | options->challenge_response_authentication = 1; |
@@ -479,7 +479,7 @@ Index: b/servconf.c | |||
479 | if (options->permit_empty_passwd == -1) | 479 | if (options->permit_empty_passwd == -1) |
480 | options->permit_empty_passwd = 0; | 480 | options->permit_empty_passwd = 0; |
481 | if (options->permit_user_env == -1) | 481 | if (options->permit_user_env == -1) |
482 | @@ -318,7 +321,7 @@ | 482 | @@ -323,7 +326,7 @@ |
483 | sListenAddress, sAddressFamily, | 483 | sListenAddress, sAddressFamily, |
484 | sPrintMotd, sPrintLastLog, sIgnoreRhosts, | 484 | sPrintMotd, sPrintLastLog, sIgnoreRhosts, |
485 | sX11Forwarding, sX11DisplayOffset, sX11UseLocalhost, | 485 | sX11Forwarding, sX11DisplayOffset, sX11UseLocalhost, |
@@ -488,7 +488,7 @@ Index: b/servconf.c | |||
488 | sPermitUserEnvironment, sUseLogin, sAllowTcpForwarding, sCompression, | 488 | sPermitUserEnvironment, sUseLogin, sAllowTcpForwarding, sCompression, |
489 | sAllowUsers, sDenyUsers, sAllowGroups, sDenyGroups, | 489 | sAllowUsers, sDenyUsers, sAllowGroups, sDenyGroups, |
490 | sIgnoreUserKnownHosts, sCiphers, sMacs, sProtocol, sPidFile, | 490 | sIgnoreUserKnownHosts, sCiphers, sMacs, sProtocol, sPidFile, |
491 | @@ -428,6 +431,7 @@ | 491 | @@ -433,6 +436,7 @@ |
492 | { "x11uselocalhost", sX11UseLocalhost, SSHCFG_ALL }, | 492 | { "x11uselocalhost", sX11UseLocalhost, SSHCFG_ALL }, |
493 | { "xauthlocation", sXAuthLocation, SSHCFG_GLOBAL }, | 493 | { "xauthlocation", sXAuthLocation, SSHCFG_GLOBAL }, |
494 | { "strictmodes", sStrictModes, SSHCFG_GLOBAL }, | 494 | { "strictmodes", sStrictModes, SSHCFG_GLOBAL }, |
@@ -496,7 +496,7 @@ Index: b/servconf.c | |||
496 | { "permitemptypasswords", sEmptyPasswd, SSHCFG_ALL }, | 496 | { "permitemptypasswords", sEmptyPasswd, SSHCFG_ALL }, |
497 | { "permituserenvironment", sPermitUserEnvironment, SSHCFG_GLOBAL }, | 497 | { "permituserenvironment", sPermitUserEnvironment, SSHCFG_GLOBAL }, |
498 | { "uselogin", sUseLogin, SSHCFG_GLOBAL }, | 498 | { "uselogin", sUseLogin, SSHCFG_GLOBAL }, |
499 | @@ -1047,6 +1051,10 @@ | 499 | @@ -1116,6 +1120,10 @@ |
500 | intptr = &options->tcp_keep_alive; | 500 | intptr = &options->tcp_keep_alive; |
501 | goto parse_flag; | 501 | goto parse_flag; |
502 | 502 | ||
@@ -507,7 +507,7 @@ Index: b/servconf.c | |||
507 | case sEmptyPasswd: | 507 | case sEmptyPasswd: |
508 | intptr = &options->permit_empty_passwd; | 508 | intptr = &options->permit_empty_passwd; |
509 | goto parse_flag; | 509 | goto parse_flag; |
510 | @@ -1773,6 +1781,7 @@ | 510 | @@ -1921,6 +1929,7 @@ |
511 | dump_cfg_fmtint(sX11UseLocalhost, o->x11_use_localhost); | 511 | dump_cfg_fmtint(sX11UseLocalhost, o->x11_use_localhost); |
512 | dump_cfg_fmtint(sStrictModes, o->strict_modes); | 512 | dump_cfg_fmtint(sStrictModes, o->strict_modes); |
513 | dump_cfg_fmtint(sTCPKeepAlive, o->tcp_keep_alive); | 513 | dump_cfg_fmtint(sTCPKeepAlive, o->tcp_keep_alive); |
@@ -582,7 +582,7 @@ Index: b/ssh-keygen.1 | |||
582 | =================================================================== | 582 | =================================================================== |
583 | --- a/ssh-keygen.1 | 583 | --- a/ssh-keygen.1 |
584 | +++ b/ssh-keygen.1 | 584 | +++ b/ssh-keygen.1 |
585 | @@ -679,6 +679,7 @@ | 585 | @@ -691,6 +691,7 @@ |
586 | .Xr ssh 1 , | 586 | .Xr ssh 1 , |
587 | .Xr ssh-add 1 , | 587 | .Xr ssh-add 1 , |
588 | .Xr ssh-agent 1 , | 588 | .Xr ssh-agent 1 , |
@@ -1245,7 +1245,7 @@ Index: b/ssh.c | |||
1245 | =================================================================== | 1245 | =================================================================== |
1246 | --- a/ssh.c | 1246 | --- a/ssh.c |
1247 | +++ b/ssh.c | 1247 | +++ b/ssh.c |
1248 | @@ -1492,7 +1492,7 @@ | 1248 | @@ -1495,7 +1495,7 @@ |
1249 | static void | 1249 | static void |
1250 | load_public_identity_files(void) | 1250 | load_public_identity_files(void) |
1251 | { | 1251 | { |
@@ -1254,7 +1254,7 @@ Index: b/ssh.c | |||
1254 | char *pwdir = NULL, *pwname = NULL; | 1254 | char *pwdir = NULL, *pwname = NULL; |
1255 | int i = 0; | 1255 | int i = 0; |
1256 | Key *public; | 1256 | Key *public; |
1257 | @@ -1549,6 +1549,22 @@ | 1257 | @@ -1552,6 +1552,22 @@ |
1258 | public = key_load_public(filename, NULL); | 1258 | public = key_load_public(filename, NULL); |
1259 | debug("identity file %s type %d", filename, | 1259 | debug("identity file %s type %d", filename, |
1260 | public ? public->type : -1); | 1260 | public ? public->type : -1); |
@@ -1281,7 +1281,7 @@ Index: b/ssh_config.5 | |||
1281 | =================================================================== | 1281 | =================================================================== |
1282 | --- a/ssh_config.5 | 1282 | --- a/ssh_config.5 |
1283 | +++ b/ssh_config.5 | 1283 | +++ b/ssh_config.5 |
1284 | @@ -1188,6 +1188,23 @@ | 1284 | @@ -1187,6 +1187,23 @@ |
1285 | .Dq any . | 1285 | .Dq any . |
1286 | The default is | 1286 | The default is |
1287 | .Dq any:any . | 1287 | .Dq any:any . |
@@ -1331,7 +1331,7 @@ Index: b/sshd.8 | |||
1331 | =================================================================== | 1331 | =================================================================== |
1332 | --- a/sshd.8 | 1332 | --- a/sshd.8 |
1333 | +++ b/sshd.8 | 1333 | +++ b/sshd.8 |
1334 | @@ -951,6 +951,7 @@ | 1334 | @@ -953,6 +953,7 @@ |
1335 | .Xr ssh-agent 1 , | 1335 | .Xr ssh-agent 1 , |
1336 | .Xr ssh-keygen 1 , | 1336 | .Xr ssh-keygen 1 , |
1337 | .Xr ssh-keyscan 1 , | 1337 | .Xr ssh-keyscan 1 , |
@@ -1343,7 +1343,7 @@ Index: b/sshd.c | |||
1343 | =================================================================== | 1343 | =================================================================== |
1344 | --- a/sshd.c | 1344 | --- a/sshd.c |
1345 | +++ b/sshd.c | 1345 | +++ b/sshd.c |
1346 | @@ -1602,6 +1602,11 @@ | 1346 | @@ -1593,6 +1593,11 @@ |
1347 | sensitive_data.host_keys[i] = NULL; | 1347 | sensitive_data.host_keys[i] = NULL; |
1348 | continue; | 1348 | continue; |
1349 | } | 1349 | } |
@@ -1359,7 +1359,7 @@ Index: b/sshd_config.5 | |||
1359 | =================================================================== | 1359 | =================================================================== |
1360 | --- a/sshd_config.5 | 1360 | --- a/sshd_config.5 |
1361 | +++ b/sshd_config.5 | 1361 | +++ b/sshd_config.5 |
1362 | @@ -795,6 +795,20 @@ | 1362 | @@ -803,6 +803,20 @@ |
1363 | Specifies whether password authentication is allowed. | 1363 | Specifies whether password authentication is allowed. |
1364 | The default is | 1364 | The default is |
1365 | .Dq yes . | 1365 | .Dq yes . |