| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
- openssh-server Recommends: ssh-import-id (no-op in Debian since that
package doesn't exist there, but this reduces the Ubuntu delta).
|
|
authorized_keys lines for the same key; it's still not ideal, but at
least you'll only get one log entry per key (closes: #630606).
|
|
|
|
|
|
- Make hostbased auth with ECDSA keys work correctly (closes: #633368).
|
|
|
|
|
|
recommendation (closes: #622604).
|
|
|
|
|
|
since the required minimum versions are rather old now anyway and
openssl has bumped its SONAME (thanks, Julien Cristau; closes: #620828).
|
|
|
|
#614897).
|
|
Joel Stanley).
-q -f /etc/ssh/ssh_host_ecdsa_key -N "" -t ecdsa'.
|
|
|
|
|
|
|
|
|
|
- Fix stack information leak in legacy certificate signing
(http://www.openssh.com/txt/legacy-cert.adv).
|
|
|
|
|
|
[contrib/suse/openssh.spec] update versions in docs and spec files.
- Release OpenSSH 5.8p1
|
|
[version.h]
openssh-5.8
|
|
[key.c]
fix uninitialised nonce variable; reported by Mateusz Kocielski
|
|
[PROTOCOL.mux]
cut'n'pasto; from bert.wesarg AT googlemail.com
|
|
- (djm) [openbsd-compat/port-linux.c] Check whether SELinux is enabled
before attempting setfscreatecon(). Check whether matchpathcon()
succeeded before using its result. Patch from cjwatson AT debian.org;
bz#1851
|
|
20110125
- (djm) [configure.ac Makefile.in ssh.c openbsd-compat/port-linux.c
openbsd-compat/port-linux.h] Move SELinux-specific code from ssh.c to
port-linux.c to avoid compilation errors. Add -lselinux to ssh when
building with SELinux support to avoid linking failure; report from
amk AT spamfence.net; ok dtucker
|
|
before attempting setfscreatecon(). Check whether matchpathcon()
succeeded before using its result. Patch from cjwatson AT debian.org;
bz#1851
|
|
|
|
(LP: #708571).
|
|
|
|
on upgrades
|
|
- (tim) [configure.ac] Consistent M4 quoting throughout, updated obsolete
AC_TRY_COMPILE with AC_COMPILE_IFELSE, updated obsolete AC_TRY_LINK with
AC_LINK_IFELSE, updated obsolete AC_TRY_RUN with AC_RUN_IFELSE, misc white
space changes for consistency/readability. Makes autoconf 2.68 happy.
"Nice work" djm
|
|
- (tim) [config.guess config.sub] Sync with upstream.
|
|
|
|
|
|
|
|
SELinux build fix.
|
|
|
|
openbsd-compat/port-linux.h] Move SELinux-specific code from ssh.c to
port-linux.c to avoid compilation errors. Add -lselinux to ssh when
building with SELinux support to avoid linking failure; report from
amk AT spamfence.net; ok dtucker
|
|
|
|
installations or if you manually add 'HostKey
/etc/ssh/ssh_host_ecdsa_key' to /etc/ssh/sshd_config.
|
|
- Implement Elliptic Curve Cryptography modes for key exchange (ECDH)
and host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA
offer better performance than plain DH and DSA at the same equivalent
symmetric key length, as well as much shorter keys.
- sftp(1)/sftp-server(8): add a protocol extension to support a hard
link operation. It is available through the "ln" command in the
client. The old "ln" behaviour of creating a symlink is available
using its "-s" option or through the preexisting "symlink" command.
- scp(1): Add a new -3 option to scp: Copies between two remote hosts
are transferred through the local host (closes: #508613).
- ssh(1): "atomically" create the listening mux socket by binding it on
a temporary name and then linking it into position after listen() has
succeeded. This allows the mux clients to determine that the server
socket is either ready or stale without races (closes: #454784).
Stale server sockets are now automatically removed (closes: #523250).
- ssh(1): install a SIGCHLD handler to reap expired child process
(closes: #594687).
- ssh(1)/ssh-agent(1): honour $TMPDIR for client xauth and ssh-agent
temporary directories (closes: #357469, although only if you arrange
for ssh-agent to actually see $TMPDIR since the setgid bit will cause
it to be stripped off).
|
|
|
|
|
|
|
|
|
|
|
