summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-05-07Move platform_sys_dir_uid to misc.c to fix linking following ↵Colin Watson
user-group-modes.patch.
2013-05-07* New upstream release (http://www.openssh.com/txt/release-6.2).Colin Watson
- Add support for multiple required authentication in SSH protocol 2 via an AuthenticationMethods option (closes: #195716). - Fix Sophie Germain formula in moduli(5) (closes: #698612). - Update ssh-copy-id to Phil Hands' greatly revised version (closes: #99785, #322228, #620428; LP: #518883, #835901, #1074798).
2013-05-07merge 6.2p1; reorder additions to monitor.h for easier merging in futureColin Watson
2013-05-07Import 6.2p1 tarballColin Watson
2013-05-06Use dh-autoreconf.Colin Watson
2013-03-25releasing version 1:6.1p1-4Colin Watson
2013-03-25Add ssh-agent upstart user job. This implements something similar toStéphane Graber
the 90x11-common_ssh-agent Xsession script. That is, start ssh-agent and set the appropriate environment variables (closes: #703906).
2013-03-25debian/openssh-server.sshd.pam: Explicitly state that ~/.pam_environmentGunnar Hjalmarsson
should be read, and move the pam_env calls from "auth" to "session" so that it's also read when $HOME is encrypted (LP: #952185).
2013-03-22 - (djm) Release 6.2p1Damien Miller
2013-03-22 - (djm) [contrib/ssh-copy-id contrib/ssh-copy-id.1] Updated to PhilDamien Miller
Hands' greatly revised version.
2013-03-20 - (djm) [configure.ac log.c scp.c sshconnect2.c openbsd-compat/vis.c]Damien Miller
[openbsd-compat/vis.h] FreeBSD's strnvis isn't compatible with OpenBSD's so mark it as broken. Patch from des AT des.no
2013-03-16 - (tim) [configure.ac] OpenServer 5 wants lastlog even though it has noneTim Rice
of the bits the configure test looks for.
2013-03-15 - (djm) [session.c] FreeBSD needs setusercontext(..., LOGIN_SETUMASK) toDamien Miller
occur after UID switch; patch from John Marshall via des AT des.no; ok dtucker@
2013-03-15 - (djm) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]Damien Miller
Add a usleep replacement for platforms that lack it; ok dtucker
2013-03-15 - (djm) [configure.ac] Disable utmp, wtmp and/or lastlog if the platformDamien Miller
is unable to successfully compile them. Based on patch from des AT des.no
2013-03-12 - (dtucker) [auth.c configure.ac platform.c platform.h] Accept uid 2 ("bin")Darren Tucker
in addition to root as an owner of system directories on AIX and HP-UX. ok djm@
2013-03-12 - (dtucker) [regress/Makefile regress/cipher-speed.sh regress/test-exec.sh]Darren Tucker
Improve portability of cipher-speed test, based mostly on a patch from Iain Morgan.
2013-03-08 - (djm) [configure.ac] Add a timeout to the select/rlimit test to give it aDamien Miller
chance to complete on broken systems; ok dtucker@
2013-03-07 - (tim) [Makefile.in] Add another missing $(EXEEXT) I should have seen 3 daysTim Rice
ago.
2013-03-07remove extra wordDarren Tucker
2013-03-07 - (dtucker) [defines.h] Remove SIZEOF_CHAR bits since the test for it isDarren Tucker
was removed in configure.ac rev 1.481 as it was redundant.
2013-03-07 - (dtucker) [INSTALL] Bump documented autoconf version to what we'reDarren Tucker
currently using.
2013-03-06 - (dtucker) [configure.ac] test that we can set number of file descriptorsDarren Tucker
to zero with setrlimit before enabling the rlimit sandbox. This affects (at least) HPUX 11.11.
2013-03-06 - (dtucker) [regress/forward-control.sh] Wait longer for the forwardingDarren Tucker
connection to start so that the test works on slower machines.
2013-03-05 - (tim) [Makefile.in] Add missing $(EXEEXT). Found by Roumen Petrov.Tim Rice
2013-03-05 - (dtucker) [Makefile.in] Remove trailing "\" on PATHS, which caused obscureDarren Tucker
build breakage on (at least) HP-UX 11.11. Found by Amit Kulkarni and Kevin Brott.
2013-03-05add Amit.Darren Tucker
2013-03-05 - (dtucker) [configure.ac] use "=" for shell test and not "==". Spotted byDarren Tucker
Kevin Brott.
2013-03-05 - (djm) [regress/modpipe.c] Compilation fix for AIX and parsing fix forDamien Miller
HP/UX. Spotted by Kevin Brott
2013-02-26 - (tim) [regress/krl.sh] keep old solaris awk from hanging.Tim Rice
2013-02-26 - (tim) [regress/integrity.sh] keep old solaris awk from hanging.Tim Rice
2013-02-26 - (tim) [regress/integrity.sh] shell portability fix.Tim Rice
2013-02-26 - (tim) [regress/forward-control.sh] use sh in case login shell is csh.Tim Rice
2013-02-27 - (djm) [README contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller
[contrib/suse/openssh.spec] Crank version numbers
2013-02-26 - (djm) [regress/integrity.sh] Run sshd via $SUDO; fixes tinderbox breakageDamien Miller
for UsePAM=yes configuration
2013-02-26 - djm@cvs.openbsd.org 2013/02/20 08:27:50Damien Miller
[integrity.sh] Add an option to modpipe that warns if the modification offset it not reached in it's stream and turn it on for t-integrity. This should catch cases where the session is not fuzzed for being too short (cf. my last "oops" commit)
2013-02-25 - (dtucker) [configure.ac ssh-gss.h] bz#2073: additional #includes neededDarren Tucker
to use Solaris native GSS libs. Patch from Pierre Ossman.
2013-02-25welcome to 2013Darren Tucker
2013-02-23 - (djm) [configure.ac includes.h loginrec.c mux.c sftp.c] PreferDamien Miller
bsd/libutil.h to libutil.h to avoid deprecation warnings on Ubuntu. ok tim
2013-02-22 - (djm) [configure.ac sandbox-seccomp-filter.c] Support for LinuxDamien Miller
seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com; ok dtucker
2013-02-22 - (dtucker) [configure.ac] bz#2073: look for Solaris' differently-namedDarren Tucker
libgss too. Patch from Pierre Ossman, ok djm.
2013-02-22 - (dtucker) [Makefile.in configure.ac] bz#2072: don't link krb5 libs toDarren Tucker
ssh(1) since they're not needed. Patch from Pierre Ossman.
2013-02-20 - (tim) [regress/forward-control.sh] shell portability fix.Tim Rice
2013-02-20 - djm@cvs.openbsd.org 2013/02/20 08:29:27Damien Miller
[regress/modpipe.c] s/Id/OpenBSD/ in RCS tag
2013-02-20 - djm@cvs.openbsd.org 2013/02/20 08:27:50Damien Miller
[regress/integrity.sh regress/modpipe.c] Add an option to modpipe that warns if the modification offset it not reached in it's stream and turn it on for t-integrity. This should catch cases where the session is not fuzzed for being too short (cf. my last "oops" commit)
2013-02-19 - (tim) [krl.c Makefile.in regress/Makefile regress/modpipe.c] remove unneededTim Rice
err.h include from krl.c. Additional portability fixes for modpipe. OK djm
2013-02-19 - (tim) [regress/cipher-speed.sh regress/try-ciphers.sh] shell portability fix.Tim Rice
2013-02-19 - (djm) [regress/integrity.sh] Skip SHA2-based MACs on configurations thatDamien Miller
lack support for SHA2.
2013-02-19 - djm@cvs.openbsd.org 2013/02/19 02:14:09Damien Miller
[integrity.sh] oops, forgot to increase the output of the ssh command to ensure that we actually reach $offset
2013-02-19 - djm@cvs.openbsd.org 2013/02/18 22:26:47Damien Miller
[integrity.sh] crank the offset yet again; it was still fuzzing KEX one of Darren's portable test hosts at 2800