summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-10-18 - dtucker@cvs.openbsd.org 2011/10/16 11:02:46Damien Miller
[moduli.c ssh-keygen.1 ssh-keygen.c] Add optional checkpoints for moduli screening. feedback & ok deraadt
2011-10-18 - djm@cvs.openbsd.org 2011/10/04 14:17:32Damien Miller
[sftp-glob.c] silence error spam for "ls */foo" in directory with files; bz#1683
2011-10-02 - djm@cvs.openbsd.org 2011/09/30 21:22:49Darren Tucker
[sshd.c] fix inverted test that caused logspam; spotted by henning@
2011-10-02ChangeLog entry for sshd.c rev 1.409Darren Tucker
2011-10-02 - djm@cvs.openbsd.org 2011/09/25 05:44:47Darren Tucker
[auth2-pubkey.c] improve the AuthorizedPrincipalsFile debug log message to include file and line number
2011-10-02 - markus@cvs.openbsd.org 2011/09/23 07:45:05Darren Tucker
[mux.c readconf.h channels.h compat.h compat.c ssh.c readconf.c channels.c version.h] unbreak remote portforwarding with dynamic allocated listen ports: 1) send the actual listen port in the open message (instead of 0). this allows multiple forwardings with a dynamic listen port 2) update the matching permit-open entry, so we can identify where to connect to report: den at skbkontur.ru and P. Szczygielski feedback and ok djm@
2011-10-02 - dtucker@cvs.openbsd.org 2011/09/23 00:22:04Darren Tucker
[channels.c auth-options.c servconf.c channels.h sshd.8] Add wildcard support to PermitOpen, allowing things like "PermitOpen localhost:*". bz #1857, ok djm markus.
2011-10-02remove SELECT_REQUIRED_FDS added erroneously with strnlen. spotted by timDarren Tucker
2011-10-01 - (dtucker) [openbsd-compat/mktemp.c] Fix compiler warning. ok djmDarren Tucker
2011-09-29 - (dtucker) [configure.ac openbsd-compat/Makefile.inDarren Tucker
openbsd-compat/strnlen.c] Add strnlen to the compat library.
2011-09-29 - (djm) [configure.ac defines.h] No need to detect sizeof(char); patchDamien Miller
from des AT des.no
2011-09-23 - (djm) [openbsd-compat/setenv.c] Forklift upgrade, including inclusionDamien Miller
of static __findenv() function from upstream setenv.c
2011-09-23 - otto@cvs.openbsd.org 2008/12/09 19:38:38Damien Miller
[openbsd-compat/inet_ntop.c] fix inet_ntop(3) prototype; ok millert@ libc to be bumbed very soon
2011-09-23 - (djm) [openbsd-compat/sha2.c openbsd-compat/sha2.h] Remove OpenBSD rcsidDamien Miller
marker. The upstream API has changed (function and structure names) enough to put it out of sync with other providers of this interface.
2011-09-23 - (djm) [openbsd-compat/mktemp.c] forklift upgrade to -current version.Damien Miller
The file was totally rewritten between what we had in tree and -current.
2011-09-23 - millert@cvs.openbsd.org 2008/08/21 16:54:44Damien Miller
[mktemp.c] Remove useless code, the kernel will set errno appropriately if an element in the path does not exist. OK deraadt@ pvalchev@
2011-09-23 - deraadt@cvs.openbsd.org 2008/07/22 21:47:45Damien Miller
[mktemp.c] use arc4random_uniform(); ok djm millert
2011-09-23 - (djm) [openbsd-compat/getgrouplist.c] Remove OpenBSD rcsid marker: theDamien Miller
upstream version is YPified and we don't want this
2011-09-23 - tobias@cvs.openbsd.org 2007/10/21 11:09:30Damien Miller
[mktemp.c] Comment fix about time consumption of _gettemp. FreeBSD did this in revision 1.20. OK deraadt@, krw@
2011-09-23 - (djm) [openbsd-compat/getcwd.c] Remove OpenBSD rcsid marker since we noDamien Miller
longer want to sync this file (OpenBSD uses a __getcwd syscall now, we want this longhand version)
2011-09-23 - millert@cvs.openbsd.org 2006/05/05 15:27:38Damien Miller
[openbsd-compat/strlcpy.c] Convert do {} while loop -> while {} for clarity. No binary change on most architectures. From Oliver Smith. OK deraadt@ and henning@
2011-09-23 - millert@cvs.openbsd.org 2006/05/05 15:27:38Damien Miller
[strlcpy.c] Convert do {} while loop -> while {} for clarity. No binary change on most architectures. From Oliver Smith. OK deraadt@ and henning@
2011-09-22 - djm@cvs.openbsd.org 2011/09/22 06:29:03Damien Miller
[sftp.c] don't let remote_glob() implicitly sort its results in do_globbed_ls() - in all likelihood, they will be resorted anyway
2011-09-22 - markus@cvs.openbsd.org 2011/09/12 08:46:15Damien Miller
[sftp-client.c] fix leak in do_lsreaddir(); ok djm
2011-09-22 - markus@cvs.openbsd.org 2011/09/11 16:07:26Damien Miller
[sftp-client.c] fix leaks in do_hardlink() and do_readlink(); bz#1921 from Loganaden Velvindron
2011-09-22 - okan@cvs.openbsd.org 2011/09/11 06:59:05Damien Miller
[ssh.1] document new -O cancel command; ok djm@
2011-09-22 - markus@cvs.openbsd.org 2011/09/10 22:26:34Damien Miller
[channels.c channels.h clientloop.c ssh.1] support cancellation of local/dynamic forwardings from ~C commandline; ok & feedback djm@
2011-09-22 - djm@cvs.openbsd.org 2011/09/09 22:46:44Damien Miller
[channels.c channels.h clientloop.h mux.c ssh.c] support for cancelling local and remote port forwards via the multiplex socket. Use ssh -O cancel -L xx:xx:xx -R yy:yy:yy user@host" to request the cancellation of the specified forwardings; ok markus@
2011-09-22 - djm@cvs.openbsd.org 2011/09/09 22:38:21Damien Miller
[sshd.c] kill the preauth privsep child on fatal errors in the monitor; ok markus@
2011-09-22 - djm@cvs.openbsd.org 2011/09/09 22:37:01Damien Miller
[scp.c] suppress adding '--' to remote commandlines when the first argument does not start with '-'. saves breakage on some difficult-to-upgrade embedded/router platforms; feedback & ok dtucker ok markus
2011-09-22 - djm@cvs.openbsd.org 2011/09/09 00:44:07Damien Miller
[PROTOCOL.mux] MUX_C_CLOSE_FWD includes forward type in message (though it isn't implemented anyway)
2011-09-22 - djm@cvs.openbsd.org 2011/09/09 00:43:00Damien Miller
[ssh_config.5 sshd_config.5] fix typo in IPQoS parsing: there is no "AF14" class, but there is an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk
2011-09-22 - deraadt@cvs.openbsd.org 2011/09/07 02:18:31Damien Miller
[ssh-keygen.1] typo (they vs the) found by Lawrence Teo
2011-09-22 - jmc@cvs.openbsd.org 2011/09/05 07:01:44Damien Miller
[scp.1] knock out a useless Ns;
2011-09-22 - djm@cvs.openbsd.org 2011/09/05 05:59:08Damien Miller
[misc.c] fix typo in IPQoS parsing: there is no "AF14" class, but there is an "AF21" class. Spotted by giesen AT snickers.org; ok markus stevesk
2011-09-22 - djm@cvs.openbsd.org 2011/09/05 05:56:13Damien Miller
[scp.1 sftp.1] mention ControlPersist and KbdInteractiveAuthentication in the -o verbiage in these pages too (prompted by jmc@)
2011-09-22 - djm@cvs.openbsd.org 2011/08/26 01:45:15Damien Miller
[ssh.1] Add some missing ssh_config(5) options that can be used in ssh(1)'s -o argument. Patch from duclare AT guu.fi
2011-09-22 - djm@cvs.openbsd.org 2011/09/22 06:27:29Damien Miller
[glob.c] fix GLOB_KEEPSTAT without GLOB_NOSORT; the implicit sort was being applied only to the gl_pathv vector and not the corresponding gl_statv array. reported in OpenSSH bz#1935; feedback and okay matthew@
2011-09-22 - stsp@cvs.openbsd.org 2011/09/20 10:18:46Damien Miller
[glob.c] In glob(3), limit recursion during matching attempts. Similar to fnmatch fix. Also collapse consecutive '*' (from NetBSD). ok miod deraadt
2011-09-22 - pyr@cvs.openbsd.org 2011/05/12 07:15:10Damien Miller
[openbsd-compat/glob.c] When the max number of items for a directory has reached GLOB_LIMIT_READDIR an error is returned but closedir() is not called. spotted and fix provided by Frank Denis obsd-tech@pureftpd.org ok otto@, millert@
2011-09-09 - (dtucker) [entropy.h] Bug #1932: remove old definition of init_rng. FromDarren Tucker
Colin Watson.
2011-09-08releasing version 1:5.9p1-1Colin Watson
2011-09-07Update OpenSSH FAQ to revision 1.112.Colin Watson
2011-09-07merge respun 5.9p1Colin Watson
2011-09-07merge 5.9p1 (respun)Colin Watson
2011-09-07Import 5.9p1 tarball (respun)Colin Watson
2011-09-07 - (djm) [contrib/redhat/openssh.spec] Correct restorcon => restoreconDamien Miller
2011-09-07 - (djm) Respin OpenSSH-5.9p1 releaseDamien Miller
2011-09-07 - (djm) [README version.h] Correct versionDamien Miller
2011-09-07 - (djm) [README version.h] Correct versionDamien Miller