Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-08-15 | - markus@cvs.openbsd.org 2007/08/15 08:16:49 | Darren Tucker | |
[version.h] openssh 4.7 | |||
2007-08-15 | - markus@cvs.openbsd.org 2007/08/15 08:14:46 | Darren Tucker | |
[clientloop.c] do NOT fall back to the trused x11 cookie if generation of an untrusted cookie fails; from security-alert at sun.com; ok dtucker | |||
2007-08-13 | - (dtucker) [session.c] Bug #1339: ensure that pam_setcred() is always | Darren Tucker | |
called with PAM_ESTABLISH_CRED at least once, which resolves a problem with pam_dhkeys. Patch from David Leonard, ok djm@ | |||
2007-08-10 | - (dtucker) [configure.ac] Bug #1343: Set DISABLE_FD_PASSING for QNX6. From. | Darren Tucker | |
Matt Kraai, ok djm@. | |||
2007-08-10 | - (dtucker) [auth-pam.c] Use sigdie here too. ok djm@ | Darren Tucker | |
2007-08-09 | Credit Bernhard Simon who also reported this. | Darren Tucker | |
2007-08-09 | - (dtucker) [defines.h] Remove _PATH_{CSHELL,SHELLS} which aren't | Darren Tucker | |
used anywhere and are a potential source of warnings. | |||
2007-08-09 | - (dtucker) [README.platform] Document the interaction between PermitRootLogin | Darren Tucker | |
and the AIX native login restrictions. | |||
2007-08-09 | - (dtucker) [openbsd-compat/port-aix.c] Comment typo. | Darren Tucker | |
2007-08-08 | - djm@cvs.openbsd.org 2007/08/07 07:32:53 | Damien Miller | |
[clientloop.c clientloop.h ssh.c] bz#1232: ensure that any specified LocalCommand is executed after the tunnel device is opened. Also, make failures to open a tunnel device fatal when ExitOnForwardFailure is active. Reported by h.goebel AT goebel-consult.de; ok dtucker markus reyk deraadt | |||
2007-08-08 | - sobrado@cvs.openbsd.org 2007/08/06 19:16:06 | Damien Miller | |
[scp.1 scp.c] the ellipsis is not an optional argument; while here, sync the usage and synopsis of commands lots of good ideas by jmc@ ok jmc@ | |||
2007-08-08 | - ray@cvs.openbsd.org 2007/07/12 05:48:05 | Damien Miller | |
[key.c] Delint: remove some unreachable statements, from Bret Lambert. OK markus@ and dtucker@. | |||
2007-07-30 | releasing version 1:4.6p1-5 | Colin Watson | |
2007-07-30 | * openssh-client Suggests: keychain. | Colin Watson | |
2007-07-28 | * Build-depend on libselinux1-dev on lpia. | Colin Watson | |
2007-07-24 | - (tim) [buildpkg.sh.in] s|$FAKE_ROOT/${sysconfdir}|$FAKE_ROOT${sysconfdir}| | Tim Rice | |
2007-07-24 | - (tim) [buildpkg.sh.in openssh.xml.in] Allow more flexibility where smf(5) | Tim Rice | |
files are installed. | |||
2007-07-24 | - (tim) [openbsd-compat/regress/closefromtest.c] Bug 1345: fix open() call. | Tim Rice | |
Report/patch by David.Leonard AT quest.com | |||
2007-07-24 | - (tim) [openssh.xml.in] make FMRI match what package scripts use. | Tim Rice | |
2007-07-17 | * ssh-copy-id defaults to ~/.ssh/id_rsa.pub rather than | Colin Watson | |
~/.ssh/identity.pub, in line with ssh-keygen (thanks, Greg Norris; closes: #234627). | |||
2007-07-17 | clarify | Colin Watson | |
2007-07-17 | * ssh-copy-id no longer prints the output of expr (thanks, Peter | Colin Watson | |
Eisentraut; closes: #291534). | |||
2007-07-17 | * ssh-copy-id checks the exit status of ssh-add -L (thanks, Adeodato Simó; | Colin Watson | |
closes: #221675). | |||
2007-07-07 | * Identify ssh as a metapackage rather than a transitional package. It's | Colin Watson | |
still useful as a quick way to install both the client and the server. | |||
2007-07-06 | * debconf template translations: | Colin Watson | |
- Update Catalan (thanks, Jordà Polo; closes: #431970). | |||
2007-07-05 | releasing version 1:4.6p1-4 | Colin Watson | |
2007-07-05 | * Don't build PIE executables on hppa, as they crash. | Colin Watson | |
2007-06-29 | releasing version 1:4.6p1-3 | Colin Watson | |
2007-06-29 | fix syntax | Colin Watson | |
2007-06-29 | * Document that HashKnownHosts may break tab-completion (closes: #430154). | Colin Watson | |
2007-06-28 | - (djm) bz#1325: Fix SELinux in permissive mode where it would | Damien Miller | |
incorrectly fatal() on errors. patch from cjwatson AT debian.org; ok dtucker | |||
2007-06-27 | * Fix broken switch fallthrough when SELinux is running in permissive mode | Colin Watson | |
(closes: #430838). | |||
2007-06-26 | * Only build PIE executables on Linux and NetBSD (closes: #430455). | Colin Watson | |
2007-06-25 | - (dtucker) [atomicio.c configure.ac openbsd-compat/Makefile.in | Darren Tucker | |
openbsd-compat/bsd-poll.{c,h} openbsd-compat/openbsd-compat.h] Add an implementation of poll() built on top of select(2). Code from OpenNTPD with changes suggested by djm. ok djm@ | |||
2007-06-25 | - dtucker@cvs.openbsd.org 2007/06/25 12:02:27 | Darren Tucker | |
[atomicio.c] Include <poll.h> like the man page says rather than <sys/poll.h>. ok djm@ | |||
2007-06-25 | - (dtucker) [atomicio.c] Test for EWOULDBLOCK in atomiciov to match | Darren Tucker | |
atomicio. | |||
2007-06-25 | - dtucker@cvs.openbsd.org 2007/06/25 08:20:03 | Darren Tucker | |
[channels.c] Correct test for window updates every three packets; prevents sending window updates for every single packet. ok markus@ | |||
2007-06-25 | - djm@cvs.openbsd.org 2007/06/19 02:04:43 | Darren Tucker | |
[atomicio.c] if the fd passed to atomicio/atomiciov() is non blocking, then poll() to avoid a spin if it is not yet ready for reading/writing; ok dtucker@ | |||
2007-06-25 | - djm@cvs.openbsd.org 2007/06/14 22:48:05 | Darren Tucker | |
[ssh.c] when waiting for the multiplex exit status, read until the master end writes an entire int of data *and* closes the client_fd; fixes mux regression spotted by dtucker, ok dtucker@ | |||
2007-06-25 | - djm@cvs.openbsd.org 2007/06/14 21:43:25 | Darren Tucker | |
[ssh.c] handle EINTR when waiting for mux exit status properly | |||
2007-06-25 | - djm@cvs.openbsd.org 2007/06/13 00:21:27 | Darren Tucker | |
[scp.c] don't ftruncate() non-regular files; bz#1236 reported by wood AT xmission.com; ok dtucker@ | |||
2007-06-20 | releasing version 1:4.6p1-2 | Colin Watson | |
2007-06-19 | - Move C/R -> kbdint special case to after the defaults have been | Colin Watson | |
loaded, which makes ChallengeResponse default to yes again. This was broken by the Match changes and not fixed properly subsequently (closes: #428968). | |||
2007-06-18 | * Backport from upstream: | Colin Watson | |
- Silence spurious error messages from hang-on-exit fix (http://bugzilla.mindrot.org/show_bug.cgi?id=1306, closes: #429531). | |||
2007-06-14 | - (dtucker) [openbsd-compat/openssl-compat.h] Remove redundant definition | Darren Tucker | |
of USE_BUILTIN_RIJNDAEL since the <0.9.6 test is covered by the subsequent <0.9.7 test. | |||
2007-06-14 | - (dtucker) [openbsd-compat/openssl-compat.h] Merge USE_BUILTIN_RIJNDAEL | Darren Tucker | |
sections. Fixes builds with early OpenSSL 0.9.6 versions. | |||
2007-06-14 | - (dtucker) [cipher-ctr.c umac.c openbsd-compat/openssl-compat.h] Move the | Darren Tucker | |
USE_BUILTIN_RIJNDAEL compat goop to openssl-compat.h so it can be shared with umac.c. Allows building with OpenSSL 0.9.5 again including umac support. With tim@ djm@, ok djm. | |||
2007-06-13 | don't worry about reload failures in if-up script | Colin Watson | |
2007-06-13 | * Add /etc/network/if-up.d/openssh-server to restart sshd when new | Colin Watson | |
interfaces appear (LP: #103436). | |||
2007-06-13 | * Add try-restart action to init script. | Colin Watson | |