summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2006-10-0620061006Tim Rice
- (tim) [buildpkg.sh.in] Use uname -r instead of -v in OS_VER for Solaris. Differentiate between OpenServer 5 and OpenServer 6
2006-10-03 - (tim) [configure.ac] Move CHECK_HEADERS test before platform specificTim Rice
section so additional platform specific CHECK_HEADER tests will work correctly. Fixes "<net/if_tap.h> on FreeBSD" problem report by des AT des.no Feedback and "seems like a good idea" dtucker@
2006-10-01 - (dtucker) [audit-bsm.c] Include errno.h. Pointed out by des at des.no.Darren Tucker
2006-09-29 - (dtucker) [configure.ac] Bug #1239: Fix configure test for OpenSSH engineDarren Tucker
support. Patch from andrew.benham at thus net.
2006-09-28 - (dtucker) [entropy.c] Bug #1238: include signal.h to fix compilation errorDarren Tucker
on Solaris 8 w/out /dev/random or prngd. Patch from rl at math.technion.ac.il.
2006-09-28Marker for 4.4p1 releaseDarren Tucker
2006-09-26 - (dtucker) [sftp-server.8] Resync; spotted by djm@Darren Tucker
2006-09-26 - (dtucker) [bufaux.h] nuke bufaux.h; it's already gone from OpenBSD and notDarren Tucker
referenced any more. ok djm@
2006-09-26Trim ChangeLog Prior to 4.2p1Darren Tucker
2006-09-2420060924Tim Rice
- (tim) [configure.ac] Remove CFLAGS hack for UnixWare 1.x/2.x (added to rev 1.308) to work around broken gcc 2.x header file.
2006-09-23 - (dtucker) [configure.ac] Bug #1234: Put opensc libs into $LIBS rather thanDarren Tucker
$LDFLAGS. Patch from vapier at gentoo org.
2006-09-22 - (dtucker) [packet.c canohost.c] Include arpa/inet.h for htonl macros onDarren Tucker
some platforms (eg HP-UX 11.00). From santhi.amirta at gmail com.
2006-09-21 - (dtucker) [defines.h] Include unistd.h before defining getpgrp; fixesDarren Tucker
build error on Ultrix. From Bernhard Simon.
2006-09-21 - markus@cvs.openbsd.org 2006/09/19 21:14:08Darren Tucker
[packet.c] client NULL deref on protocol error; Tavis Ormandy, Google Security Team
2006-09-21 - otto@cvs.openbsd.org 2006/09/19 05:52:23Darren Tucker
[sftp.c] Use S_IS* macros insted of masking with S_IF* flags. The latter may have multiple bits set, which lead to surprising results. Spotted by Paul Stoeber, more to come. ok millert@ pedro@ jaredy@ djm@
2006-09-18 - (dtucker) [openbsd-compat/port-aix.{c,h}] Reduce scope of includes.Darren Tucker
Prevents macro redefinition warnings of "RDONLY".
2006-09-18 - (dtucker) [configure.ac] On AIX, check to see if the compiler will allowDarren Tucker
macro redefinitions, and if not, remove "-qlanglvl=ansi" from the flags. Allows build out of the box with older VAC and XLC compilers. Found by David Bronder and Bernhard Simon.
2006-09-17 - (dtucker) [INSTALL] Add info about audit support.Darren Tucker
2006-09-17 - (djm) [sshd.c] Fix warning/API abuse; ok dtucker@Damien Miller
2006-09-17 - (dtucker) [monitor.c] Correctly handle auditing of single commands whenDarren Tucker
using Protocol 1. From jhb at freebsd.
2006-09-17 - (dtucker) [auth-pam.c] Propogate TZ environment variable to PAM authDarren Tucker
process so that any logging it does is with the right timezone. From Scott Strickler, ok djm@.
2006-09-17 - (djm) Add openssh.xml to .cvsignore and sort itDamien Miller
2006-09-17 - djm@cvs.openbsd.org 2006/09/16 19:53:37Damien Miller
[deattack.c deattack.h packet.c] limit maximum work performed by the CRC compensation attack detector, problem reported by Tavis Ormandy, Google Security Team; ok markus@ deraadt@
2006-09-12 - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in]Damien Miller
Support SMF in Solaris Packages if enabled by configure. Patch from Chad Mynhier, tested by dtucker@
2006-09-11 - (dtucker) [cipher-aes.c] Include string.h for memcpy and friends. NotedDarren Tucker
by Pekka Savola.
2006-09-10 - (dtucker) [configure.ac] Add -lcrypt to let DragonFly build OOTB.Darren Tucker
2006-09-10 - (dtucker) [contrib/aix/buildbff.sh] Ensure that perl is available.Darren Tucker
2006-09-09 - (dtucker) [buildpkg.sh.in] Always create privsep user. ok djm@Darren Tucker
2006-09-09 - (dtucker) [contrib/aix/buildbff.sh] Always create privsep user.Darren Tucker
2006-09-09 - (dtucker) [openbsd-compat/bsd-snprintf.c] Add stdarg.h.Darren Tucker
2006-09-09 - (dtucker) [configure.ac] The BSM header test needs time.h in some cases.Darren Tucker
2006-09-08 - (dtucker) [auth-sia.c] Add includes required for build on Tru64. PatchDarren Tucker
from Chris Adams.
2006-09-08 - (dtucker) [regress/cfgmatch.sh] stop_client is racy, so give us a betterDarren Tucker
chance of winning.
2006-09-07 - (dtucker) [loginrec.c] Wrap paths.h in HAVE_PATHS_H.Darren Tucker
2006-09-06 - (tim) [configure.ac] s/BROKEN_UPDWTMP/BROKEN_UPDWTMPX/ on SCO OSR6Tim Rice
2006-09-07 - (djm) [sshd.c auth.c] Set up fakepw() with privsep uid/gid, so it canDamien Miller
be used to drop privilege to; fixes Solaris GSSAPI crash reported by Magnus Abrante; suggestion and feedback dtucker@ NB. this change will require that the privilege separation user must exist on all the time, not just when UsePrivilegeSeparation=yes
2006-09-05 - (dtucker) [loginrec.c] Include paths.h for _PATH_BTMP.Darren Tucker
2006-09-05 - (dtucker) [configure.ac] s/AC_DEFINES/AC_DEFINE/ spotted by Roumen Petrov.Darren Tucker
2006-09-04 - (dtucker) [configure.ac] Define BROKEN_UPDWTMP on SCO OSR6 as the nativeDarren Tucker
updwdtmp seems to generate invalid wtmp entries. From Roger Cornelius, ok djm@
2006-09-03 - (dtucker) [configure.ac openbsd-compat/openbsd-compat.h] Check forDarren Tucker
declaration of writev(2) and declare it ourselves if necessary. Makes the atomiciov() calls build on really old systems. ok djm@
2006-09-02 - (dtucker) [ssh-keyscan.c ssh-rand-helper.c ssh.c sshconnect.cDarren Tucker
openbsd-compat/bindresvport.c openbsd-compat/getrrsetbyname.c openbsd-compat/port-tun.c openbsd-compat/rresvport.c] Include <arpa/inet.h> for hton* and ntoh* macros. Required on (at least) HP-UX since we define _XOPEN_SOURCE_EXTENDED. Found by santhi.amirta at gmail com.
2006-09-02 - (dtucker) [openbsd-compat/port-irix.c] Add errno.h, found by Iain Morgan.Darren Tucker
2006-09-01 - (dtucker) [README contrib/{caldera,redhat,suse}/openssh.spec] CrankDarren Tucker
versions.
2006-09-01 - (dtucker) [configure.ac includes.h openbsd-compat/glob.{c,h}] ExplicitlyDarren Tucker
test for GLOB_NOMATCH and use our glob functions if it's not found. Stops sftp from segfaulting when attempting to get a nonexistent file on Cygwin (previous versions of OpenSSH didn't use the native glob). Partly from and tested by Corinna Vinschen.
2006-09-01 - (dtucker) [openbsd-compat/bsd-cygwin_util.c] Fix implict declarationDarren Tucker
warnings for binary_open and binary_close. Patch from Corinna Vinschen.
2006-09-01 - (djm) [includes.h monitor.c openbsd-compat/bindresvport.c]Damien Miller
[openbsd-compat/rresvport.c] Some more headers: netinet/in.h sys/socket.h and unistd.h in various places
2006-09-01 - (djm) [audit-bsm.c audit.c auth-bsdauth.c auth-chall.c auth-pam.c]Damien Miller
[auth-rsa.c auth-shadow.c auth-sia.c auth1.c auth2-chall.c] [auth2-gss.c auth2-kbdint.c auth2-none.c authfd.c authfile.c] [cipher-3des1.c cipher-aes.c cipher-bf1.c cipher-ctr.c clientloop.c] [dh.c dns.c entropy.c gss-serv-krb5.c gss-serv.c hostfile.c kex.c] [kexdhc.c kexdhs.c kexgexc.c kexgexs.c key.c loginrec.c mac.c] [md5crypt.c monitor.c monitor_wrap.c readconf.c rsa.c] [scard-opensc.c scard.c session.c ssh-add.c ssh-agent.c ssh-dss.c] [ssh-keygen.c ssh-keysign.c ssh-rsa.c ssh.c sshconnect.c] [sshconnect1.c sshconnect2.c sshd.c rc4.diff] [openbsd-compat/bsd-cray.c openbsd-compat/port-aix.c] [openbsd-compat/port-linux.c openbsd-compat/port-solaris.c] [openbsd-compat/port-uw.c] Lots of headers for SCO OSR6, mainly adding stdarg.h for log.h; compile problems reported by rac AT tenzing.org
2006-08-31 - (dtucker) [contrib/cygwin/ssh-host-config] Add SeTcbPrivilege privilegeDarren Tucker
while setting up the ssh service account. Patch from Corinna Vinschen.
2006-08-31 - (djm) [CREDITS LICENCE Makefile.in auth.c configure.ac includes.h ]Damien Miller
[platform.c platform.h sshd.c openbsd-compat/Makefile.in] [openbsd-compat/openbsd-compat.h openbsd-compat/port-solaris.c] [openbsd-compat/port-solaris.h] Add support for Solaris process contracts, enabled with --use-solaris-contracts. Patch from Chad Mynhier, tweaked by dtucker@ and myself; ok dtucker@
2006-08-30 - (dtucker) [auth.c openbsd-compat/port-aix.c] Bug #1207: always callDarren Tucker
loginsuccess on AIX immediately after authentication to clear the failed login count. Previously this would only happen when an interactive session starts (ie when a pty is allocated) but this means that accounts that have primarily non-interactive sessions (eg scp's) may gradually accumulate enough failures to lock out an account. This change may have a side effect of creating two audit records, one with a tty of "ssh" corresponding to the authentication and one with the allocated pty per interactive session.