summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-03-09 - (djm) [packet.c] bz#1963: Fix IPQoS not being set on non-mapped v4-in-v6Damien Miller
addressed connections. ok dtucker@
2012-03-09 - (djm) [openbsd-compat/port-linux.c] bz#1960: fix crash on SELinuxDamien Miller
systems where sshd is run in te wrong context. Patch from Sven Vermeulen; ok dtucker@
2012-02-24 - (dtucker) [audit-bsm.c configure.ac] bug #1968: enable workarounds for BSMDarren Tucker
audit breakage in Solaris 11. Patch from Magnus Johansson.
2012-02-14 - (tim) [regress/keytype.sh] stderr redirection needs to be inside back quoteTim Rice
to work. Spotted by Angel Gonzalez
2012-02-14 - (tim) [defines.h] move chunk introduced in 1.125 before MAXPATHLEN soTim Rice
it actually works.
2012-02-14 - (tim) [openbsd-compat/bsd-misc.h sshd.c] Fix conflicting return type forTim Rice
unsetenv due to rev 1.14 change to setenv.c. Cast unsetenv to void in sshd.c ok dtucker@
2012-02-14 - (djm) [openbsd-compat/bsd-cygwin_util.c] Add PROGRAMFILES to list ofDamien Miller
preserved Cygwin environment variables; from Corinna Vinschen
2012-02-11 - markus@cvs.openbsd.org 2012/02/09 20:00:18Damien Miller
[version.h] move from 6.0-beta to 6.0
2012-02-11 - markus@cvs.openbsd.org 2012/01/25 19:40:09Damien Miller
[packet.c packet.h] packet_read_poll() is not used anymore.
2012-02-11 - markus@cvs.openbsd.org 2012/01/25 19:36:31Damien Miller
[authfile.c] memleak in key_load_file(); from Jan Klemkow
2012-02-11 - markus@cvs.openbsd.org 2012/01/25 19:26:43Damien Miller
[packet.c] do not permit SSH2_MSG_SERVICE_REQUEST/ACCEPT during rekeying; ok dtucker@, djm@
2012-02-11 - dtucker@cvs.openbsd.org 2012/01/18 21:46:43Damien Miller
[clientloop.c] Ensure that $DISPLAY contains only valid characters before using it to extract xauth data so that it can't be used to play local shell metacharacter games. Report from r00t_ati at ihteam.net, ok markus.
2012-02-11 - miod@cvs.openbsd.org 2012/01/16 20:34:09Damien Miller
[ssh-pkcs11-client.c] Fix a memory leak in pkcs11_rsa_private_encrypt(), reported by Jan Klemkow. While there, be sure to buffer_clear() between send_msg() and recv_msg(). ok markus@
2012-02-11 - miod@cvs.openbsd.org 2012/01/08 13:17:11Damien Miller
[ssh-ecdsa.c] Fix memory leak in ssh_ecdsa_verify(); from Loganaden Velvindron, ok markus@
2012-02-11 - djm@cvs.openbsd.org 2012/01/07 21:11:36Damien Miller
[mux.c] fix double-free in new session handler
2012-02-11 - djm@cvs.openbsd.org 2012/01/05 00:16:56Damien Miller
[monitor.c] memleak on error path
2012-02-06 - (djm) [ssh-keygen.c] Don't fail in do_gen_all_hostkeys on platformsDamien Miller
that don't support ECC. Patch from Phil Oleson
2012-01-17 - (dtucker) [configure.ac mac.c openbsd-compat/openssl-compat.h] AddDarren Tucker
null implementation of HMAC_CTX_init for the benefit of old versions of OpenSSL that don't have it.
2011-12-19 - djm@cvs.openbsd.org 2011/12/07 05:44:38Damien Miller
[auth2.c dh.c packet.c roaming.h roaming_client.c roaming_common.c] fix some harmless and/or unreachable int overflows; reported Xi Wang, ok markus@
2011-12-19 - djm@cvs.openbsd.org 2011/12/04 23:16:12Damien Miller
[mux.c] revert: > revision 1.32 > date: 2011/12/02 00:41:56; author: djm; state: Exp; lines: +4 -1 > fix bz#1948: ssh -f doesn't fork for multiplexed connection. > ok dtucker@ it interacts badly with ControlPersist
2011-12-19 - djm@cvs.openbsd.org 2011/12/02 00:43:57Damien Miller
[mac.c] fix bz#1934: newer OpenSSL versions will require HMAC_CTX_Init before HMAC_init (this change in policy seems insane to me) ok dtucker@
2011-12-19 - djm@cvs.openbsd.org 2011/12/02 00:41:56Damien Miller
[mux.c] fix bz#1948: ssh -f doesn't fork for multiplexed connection. ok dtucker@
2011-11-25 - oga@cvs.openbsd.org 2011/11/16 12:24:28Damien Miller
[sftp.c] Don't leak list in complete_cmd_parse if there are no commands found. Discovered when I was ``borrowing'' this code for something else. ok djm@
2011-11-21 - (dtucker) [configure.ac] Set _FORTIFY_SOURCE. ok djm@Darren Tucker
2011-11-04 - (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.inDarren Tucker
openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/getrrsetbyname.c] bz 1320: Add optional support for LDNS, a BSD licensed DNS resolver library which supports DNSSEC. Patch from Simon Vallet (svallet at genoscope cns fr) with some rework from myself and djm. ok djm.
2011-11-04 - dtucker@cvs.openbsd.org 011/11/04 00:09:39Darren Tucker
[moduli] regenerated moduli file; ok deraadt
2011-11-04 - djm@cvs.openbsd.org 2011/10/24 02:13:13Darren Tucker
[session.c] bz#1859: send tty break to pty master instead of (probably already closed) slave side; "looks good" markus@
2011-11-04 - djm@cvs.openbsd.org 2011/10/24 02:10:46Darren Tucker
[ssh.c] bz#1943: unbreak stdio forwarding when ControlPersist is in user - ssh was incorrectly requesting the forward in both the control master and slave. skip requesting it in the master to fix. ok markus@
2011-11-04 - djm@cvs.openbsd.org 2011/10/19 10:39:48Darren Tucker
[umac.c] typo in comment; patch from Michael W. Bombardieri
2011-11-04 - djm@cvs.openbsd.org 2011/10/19 00:06:10Darren Tucker
[moduli.c] s/tmpfile/tmp/ to make this -Wshadow clean
2011-11-04 - djm@cvs.openbsd.org 2011/10/18 23:37:42Darren Tucker
[ssh-add.c] add -k to usage(); reminded by jmc@
2011-11-04 - djm@cvs.openbsd.org 2011/10/18 05:15:28Darren Tucker
[ssh.c] ssh(1): skip attempting to create ~/.ssh when -F is passed; ok markus@
2011-10-25 - (dtucker) [contrib/cygwin/Makefile] Continue if installing a doc fileDarren Tucker
fails. Patch from Corinna Vinschen.
2011-10-18 - djm@cvs.openbsd.org 2011/10/18 05:00:48Damien Miller
[ssh-add.1 ssh-add.c] new "ssh-add -k" option to load plain keys (skipping certificates); "looks ok" markus@
2011-10-18 - djm@cvs.openbsd.org 2011/10/18 04:58:26Damien Miller
[auth-options.c key.c] remove explict search for \0 in packet strings, this job is now done implicitly by buffer_get_cstring; ok markus
2011-10-18 - stsp@cvs.openbsd.org 2011/10/16 15:51:39Damien Miller
[moduli.c] add missing includes to unbreak tree; fix from rpointel
2011-10-18 - jmc@cvs.openbsd.org 2011/10/16 15:02:41Damien Miller
[ssh-keygen.c] put -K in the right place (usage());
2011-10-18 - dtucker@cvs.openbsd.org 2011/10/16 11:02:46Damien Miller
[moduli.c ssh-keygen.1 ssh-keygen.c] Add optional checkpoints for moduli screening. feedback & ok deraadt
2011-10-18 - djm@cvs.openbsd.org 2011/10/04 14:17:32Damien Miller
[sftp-glob.c] silence error spam for "ls */foo" in directory with files; bz#1683
2011-10-02 - djm@cvs.openbsd.org 2011/09/30 21:22:49Darren Tucker
[sshd.c] fix inverted test that caused logspam; spotted by henning@
2011-10-02ChangeLog entry for sshd.c rev 1.409Darren Tucker
2011-10-02 - djm@cvs.openbsd.org 2011/09/25 05:44:47Darren Tucker
[auth2-pubkey.c] improve the AuthorizedPrincipalsFile debug log message to include file and line number
2011-10-02 - markus@cvs.openbsd.org 2011/09/23 07:45:05Darren Tucker
[mux.c readconf.h channels.h compat.h compat.c ssh.c readconf.c channels.c version.h] unbreak remote portforwarding with dynamic allocated listen ports: 1) send the actual listen port in the open message (instead of 0). this allows multiple forwardings with a dynamic listen port 2) update the matching permit-open entry, so we can identify where to connect to report: den at skbkontur.ru and P. Szczygielski feedback and ok djm@
2011-10-02 - dtucker@cvs.openbsd.org 2011/09/23 00:22:04Darren Tucker
[channels.c auth-options.c servconf.c channels.h sshd.8] Add wildcard support to PermitOpen, allowing things like "PermitOpen localhost:*". bz #1857, ok djm markus.
2011-10-02remove SELECT_REQUIRED_FDS added erroneously with strnlen. spotted by timDarren Tucker
2011-10-01 - (dtucker) [openbsd-compat/mktemp.c] Fix compiler warning. ok djmDarren Tucker
2011-09-29 - (dtucker) [configure.ac openbsd-compat/Makefile.inDarren Tucker
openbsd-compat/strnlen.c] Add strnlen to the compat library.
2011-09-29 - (djm) [configure.ac defines.h] No need to detect sizeof(char); patchDamien Miller
from des AT des.no
2011-09-23 - (djm) [openbsd-compat/setenv.c] Forklift upgrade, including inclusionDamien Miller
of static __findenv() function from upstream setenv.c
2011-09-23 - otto@cvs.openbsd.org 2008/12/09 19:38:38Damien Miller
[openbsd-compat/inet_ntop.c] fix inet_ntop(3) prototype; ok millert@ libc to be bumbed very soon