summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2007-08-15 - markus@cvs.openbsd.org 2007/08/15 08:16:49Darren Tucker
[version.h] openssh 4.7
2007-08-15 - markus@cvs.openbsd.org 2007/08/15 08:14:46Darren Tucker
[clientloop.c] do NOT fall back to the trused x11 cookie if generation of an untrusted cookie fails; from security-alert at sun.com; ok dtucker
2007-08-13 - (dtucker) [session.c] Bug #1339: ensure that pam_setcred() is alwaysDarren Tucker
called with PAM_ESTABLISH_CRED at least once, which resolves a problem with pam_dhkeys. Patch from David Leonard, ok djm@
2007-08-10 - (dtucker) [configure.ac] Bug #1343: Set DISABLE_FD_PASSING for QNX6. From.Darren Tucker
Matt Kraai, ok djm@.
2007-08-10 - (dtucker) [auth-pam.c] Use sigdie here too. ok djm@Darren Tucker
2007-08-09Credit Bernhard Simon who also reported this.Darren Tucker
2007-08-09 - (dtucker) [defines.h] Remove _PATH_{CSHELL,SHELLS} which aren'tDarren Tucker
used anywhere and are a potential source of warnings.
2007-08-09 - (dtucker) [README.platform] Document the interaction between PermitRootLoginDarren Tucker
and the AIX native login restrictions.
2007-08-09 - (dtucker) [openbsd-compat/port-aix.c] Comment typo.Darren Tucker
2007-08-08 - djm@cvs.openbsd.org 2007/08/07 07:32:53Damien Miller
[clientloop.c clientloop.h ssh.c] bz#1232: ensure that any specified LocalCommand is executed after the tunnel device is opened. Also, make failures to open a tunnel device fatal when ExitOnForwardFailure is active. Reported by h.goebel AT goebel-consult.de; ok dtucker markus reyk deraadt
2007-08-08 - sobrado@cvs.openbsd.org 2007/08/06 19:16:06Damien Miller
[scp.1 scp.c] the ellipsis is not an optional argument; while here, sync the usage and synopsis of commands lots of good ideas by jmc@ ok jmc@
2007-08-08 - ray@cvs.openbsd.org 2007/07/12 05:48:05Damien Miller
[key.c] Delint: remove some unreachable statements, from Bret Lambert. OK markus@ and dtucker@.
2007-07-30releasing version 1:4.6p1-5Colin Watson
2007-07-30* openssh-client Suggests: keychain.Colin Watson
2007-07-28* Build-depend on libselinux1-dev on lpia.Colin Watson
2007-07-24 - (tim) [buildpkg.sh.in] s|$FAKE_ROOT/${sysconfdir}|$FAKE_ROOT${sysconfdir}|Tim Rice
2007-07-24 - (tim) [buildpkg.sh.in openssh.xml.in] Allow more flexibility where smf(5)Tim Rice
files are installed.
2007-07-24 - (tim) [openbsd-compat/regress/closefromtest.c] Bug 1345: fix open() call.Tim Rice
Report/patch by David.Leonard AT quest.com
2007-07-24 - (tim) [openssh.xml.in] make FMRI match what package scripts use.Tim Rice
2007-07-17* ssh-copy-id defaults to ~/.ssh/id_rsa.pub rather thanColin Watson
~/.ssh/identity.pub, in line with ssh-keygen (thanks, Greg Norris; closes: #234627).
2007-07-17clarifyColin Watson
2007-07-17* ssh-copy-id no longer prints the output of expr (thanks, PeterColin Watson
Eisentraut; closes: #291534).
2007-07-17* ssh-copy-id checks the exit status of ssh-add -L (thanks, Adeodato Simó;Colin Watson
closes: #221675).
2007-07-07* Identify ssh as a metapackage rather than a transitional package. It'sColin Watson
still useful as a quick way to install both the client and the server.
2007-07-06* debconf template translations:Colin Watson
- Update Catalan (thanks, Jordà Polo; closes: #431970).
2007-07-05releasing version 1:4.6p1-4Colin Watson
2007-07-05* Don't build PIE executables on hppa, as they crash.Colin Watson
2007-06-29releasing version 1:4.6p1-3Colin Watson
2007-06-29fix syntaxColin Watson
2007-06-29* Document that HashKnownHosts may break tab-completion (closes: #430154).Colin Watson
2007-06-28 - (djm) bz#1325: Fix SELinux in permissive mode where it wouldDamien Miller
incorrectly fatal() on errors. patch from cjwatson AT debian.org; ok dtucker
2007-06-27* Fix broken switch fallthrough when SELinux is running in permissive modeColin Watson
(closes: #430838).
2007-06-26* Only build PIE executables on Linux and NetBSD (closes: #430455).Colin Watson
2007-06-25 - (dtucker) [atomicio.c configure.ac openbsd-compat/Makefile.inDarren Tucker
openbsd-compat/bsd-poll.{c,h} openbsd-compat/openbsd-compat.h] Add an implementation of poll() built on top of select(2). Code from OpenNTPD with changes suggested by djm. ok djm@
2007-06-25 - dtucker@cvs.openbsd.org 2007/06/25 12:02:27Darren Tucker
[atomicio.c] Include <poll.h> like the man page says rather than <sys/poll.h>. ok djm@
2007-06-25 - (dtucker) [atomicio.c] Test for EWOULDBLOCK in atomiciov to matchDarren Tucker
atomicio.
2007-06-25 - dtucker@cvs.openbsd.org 2007/06/25 08:20:03Darren Tucker
[channels.c] Correct test for window updates every three packets; prevents sending window updates for every single packet. ok markus@
2007-06-25 - djm@cvs.openbsd.org 2007/06/19 02:04:43Darren Tucker
[atomicio.c] if the fd passed to atomicio/atomiciov() is non blocking, then poll() to avoid a spin if it is not yet ready for reading/writing; ok dtucker@
2007-06-25 - djm@cvs.openbsd.org 2007/06/14 22:48:05Darren Tucker
[ssh.c] when waiting for the multiplex exit status, read until the master end writes an entire int of data *and* closes the client_fd; fixes mux regression spotted by dtucker, ok dtucker@
2007-06-25 - djm@cvs.openbsd.org 2007/06/14 21:43:25Darren Tucker
[ssh.c] handle EINTR when waiting for mux exit status properly
2007-06-25 - djm@cvs.openbsd.org 2007/06/13 00:21:27Darren Tucker
[scp.c] don't ftruncate() non-regular files; bz#1236 reported by wood AT xmission.com; ok dtucker@
2007-06-20releasing version 1:4.6p1-2Colin Watson
2007-06-19 - Move C/R -> kbdint special case to after the defaults have beenColin Watson
loaded, which makes ChallengeResponse default to yes again. This was broken by the Match changes and not fixed properly subsequently (closes: #428968).
2007-06-18* Backport from upstream:Colin Watson
- Silence spurious error messages from hang-on-exit fix (http://bugzilla.mindrot.org/show_bug.cgi?id=1306, closes: #429531).
2007-06-14 - (dtucker) [openbsd-compat/openssl-compat.h] Remove redundant definitionDarren Tucker
of USE_BUILTIN_RIJNDAEL since the <0.9.6 test is covered by the subsequent <0.9.7 test.
2007-06-14 - (dtucker) [openbsd-compat/openssl-compat.h] Merge USE_BUILTIN_RIJNDAELDarren Tucker
sections. Fixes builds with early OpenSSL 0.9.6 versions.
2007-06-14 - (dtucker) [cipher-ctr.c umac.c openbsd-compat/openssl-compat.h] Move theDarren Tucker
USE_BUILTIN_RIJNDAEL compat goop to openssl-compat.h so it can be shared with umac.c. Allows building with OpenSSL 0.9.5 again including umac support. With tim@ djm@, ok djm.
2007-06-13don't worry about reload failures in if-up scriptColin Watson
2007-06-13* Add /etc/network/if-up.d/openssh-server to restart sshd when newColin Watson
interfaces appear (LP: #103436).
2007-06-13* Add try-restart action to init script.Colin Watson