summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-01-01* New upstream release (closes: #536182). Yes, I know 5.3p1 has been outColin Watson
for a while, but there's no GSSAPI patch available for it yet. - Change the default cipher order to prefer the AES CTR modes and the revised "arcfour256" mode to CBC mode ciphers that are susceptible to CPNI-957037 "Plaintext Recovery Attack Against SSH". - Add countermeasures to mitigate CPNI-957037-style attacks against the SSH protocol's use of CBC-mode ciphers. Upon detection of an invalid packet length or Message Authentication Code, ssh/sshd will continue reading up to the maximum supported packet length rather than immediately terminating the connection. This eliminates most of the known differences in behaviour that leaked information about the plaintext of injected data which formed the basis of this attack (closes: #506115, LP: #379329). - ForceCommand directive now accepts commandline arguments for the internal-sftp server (closes: #524423, LP: #362511). - Add AllowAgentForwarding to available Match keywords list (closes: #540623). - Make ssh(1) send the correct channel number for SSH2_MSG_CHANNEL_SUCCESS and SSH2_MSG_CHANNEL_FAILURE messages to avoid triggering 'Non-public channel' error messages on sshd(8) in openssh-5.1. - Avoid printing 'Non-public channel' warnings in sshd(8), since the ssh(1) has sent incorrect channel numbers since ~2004 (this reverts a behaviour introduced in openssh-5.1; closes: #496017). * Update to GSSAPI patch from http://www.sxw.org.uk/computing/patches/openssh-5.2p1-gsskex-all-20090726.patch, including cascading credentials support (LP: #416958).
2010-01-01TODO for gssapi branch handlingColin Watson
2010-01-01import openssh-5.2p1-gsskex-all-20090726.patchColin Watson
2010-01-01Import 5.2p1 tarballColin Watson
2009-12-29no-op merge from constructed gssapi branch, to ease future upstream mergesColin Watson
2009-12-29import openssh-5.1p1-gsskex-cjwatson-20080722.patchColin Watson
2009-12-29import openssh-4.7p1-gsskex-20070927.patchColin Watson
2009-12-29import openssh-4.6p1-gsskex-20070312.patchColin Watson
2009-12-29import openssh-4.3p2-gsskex-20060223.patchColin Watson
2009-12-29import openssh-4.2p1-gsskex-20050926-2.patchColin Watson
2009-12-29import openssh-4.0p1-gssapikex.patchColin Watson
2009-12-21pushed some previous upstream release branches to LaunchpadColin Watson
2009-12-21Add debian/README.source with instructions on bzr handling.Colin Watson
2009-12-21move local ignores to .bzrignore and resync .cvsignore files with upstreamColin Watson
2009-12-21Moved to bzr.debian.org; add Vcs-Bzr and Vcs-Browser control fields.Colin Watson
2009-11-12Use x11.pc when compiling/linking gnome-ssh-askpass2 (closes: #555951).Colin Watson
2009-10-05releasing version 1:5.1p1-8Colin Watson
2009-10-04Pass $SSHD_OPTS when checking configuration too (thanks, "sobtwmxt";Colin Watson
closes: #548662).
2009-09-30Fix grammar in if-up script (closes: #549128).Colin Watson
2009-09-17Build-depend on libselinux1-dev on sh4 too (thanks, Nobuhiro Iwamatsu;Colin Watson
closes: #547103).
2009-08-28Build with just -fPIC on mips/mipsel, not -fPIE as well (thanks, LIU Qi;Colin Watson
closes: #538313).
2009-07-31releasing version 1:5.1p1-7Colin Watson
2009-07-31Upgrade to debhelper v7.Colin Watson
2009-07-31Use 'which' rather than 'type' in maintainer scripts.Colin Watson
2009-07-31Add ${misc:Depends} to keep Lintian happy.Colin Watson
2009-07-28Set umask to 022 in the init script as well as postinsts (closes:Colin Watson
#539030).
2009-07-24Update config.guess and config.sub from autotools-dev 20090611.1Colin Watson
(closes: #538301).
2009-06-05releasing version 1:5.1p1-6Colin Watson
2009-06-05this isn't needed, already removed aboveColin Watson
2009-06-05Use invoke-rc.d in openssh-server's if-up script.Colin Watson
2009-06-05Remove /var/run/sshd from openssh-server package; it will be created atColin Watson
run-time before starting the server.
2009-06-05Build with -fPIC on mips/mipsel (thanks, Luk Claes; closes: #531942).Colin Watson
2009-05-28Check if delgroup is present in openssh-client.postrm (closes: #530501).Colin Watson
2009-04-06Add a comment above PermitRootLogin in sshd_config pointing toColin Watson
README.Debian.
2009-02-23 - (djm) Release openssh-5.2p1Damien Miller
2009-02-23 - (djm) [README] update for 5.2Damien Miller
2009-02-23trimDamien Miller
2009-02-23 - djm@cvs.openbsd.org 2009/02/23 00:06:15Damien Miller
[version.h] openssh-5.2
2009-02-23 - djm@cvs.openbsd.org 2009/02/22 23:59:25Damien Miller
[sshd_config.5] missing period
2009-02-23 - djm@cvs.openbsd.org 2009/02/22 23:50:57Damien Miller
[ssh_config.5 sshd_config.5] don't advertise experimental options
2009-02-22 - (djm) OpenBSD CVS SyncDamien Miller
- tobias@cvs.openbsd.org 2009/02/21 19:32:04 [misc.c sftp-server-main.c ssh-keygen.c] Added missing newlines in error messages. ok dtucker
2009-02-21 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller
[contrib/suse/openssh.spec] Prepare for 5.2p1
2009-02-21 - djm@cvs.openbsd.org 2009/02/18 04:31:21Damien Miller
[schnorr.c] signature should hash over the entire group, not just the generator (this is still disabled code)
2009-02-21 - djm@cvs.openbsd.org 2009/02/17 01:28:32Damien Miller
[ssh_config] sync with revised default ciphers; pointed out by dkrause@
2009-02-16 - (djm) [configure.ac] support GNU/kFreeBSD and GNU/kOpensolarisDamien Miller
systems; patch from Aurelien Jarno via rmh AT aybabtu.com
2009-02-16 - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh]Damien Miller
[regress/putty-kex.sh regress/putty-transfer.sh] Downgrade disabled interop tests from FATAL error to a warning. Allows some interop tests to proceed if others are missing necessary prerequisites.
2009-02-14 - djm@cvs.openbsd.org 2009/02/14 06:35:49Damien Miller
[PROTOCOL] mention that eow and no-more-sessions extensions are sent only to OpenSSH peers
2009-02-14 - markus@cvs.openbsd.org 2009/02/13 11:50:21Damien Miller
[packet.c] check for enc !=NULL in packet_start_discard
2009-02-14 - jmc@cvs.openbsd.org 2009/02/12 07:34:20Damien Miller
[ssh_config.5] kill trailing whitespace;
2009-02-14 - djm@cvs.openbsd.org 2009/02/12 03:46:17Damien Miller
[ssh_config.5] document RemoteForward usage with 0 listen port
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-29 13:41:37 +0000