summaryrefslogtreecommitdiff
path: root/ChangeLog
AgeCommit message (Collapse)Author
2008-05-19 - (djm) [openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.c]Damien Miller
[configure.ac] Implement arc4random_buf(), import implementation of arc4random_uniform() from OpenBSD
2008-05-19 - djm@cvs.openbsd.org 2008/04/05 02:46:02Damien Miller
[sshd_config.5] HostbasedAuthentication is supported under Match too
2008-05-19 - djm@cvs.openbsd.org 2008/04/04 06:44:26Damien Miller
[sshd_config.5] oops, some unrelated stuff crept into that commit - backout. spotted by jmc@
2008-05-19 - (djm) OpenBSD CVS SyncDamien Miller
- djm@cvs.openbsd.org 2008/04/04 05:14:38 [sshd_config.5] ChrootDirectory is supported in Match blocks (in fact, it is most useful there). Spotted by Minstrel AT minstrel.org.uk
2008-05-16 - (djm) Force string arguments to replacement setproctitle() thoughDamien Miller
strnvis first. Ok dtucker@
2008-04-04 - (djm) [openbsd-compat/bsd-poll.c] Include stdlib.h to avoid compile-Damien Miller
time warnings on LynxOS. Patch from ops AT iki.fi
2008-04-03 - (djm) Release 5.0p1Damien Miller
2008-04-03 - (djm) [README] Update link to release notesDamien Miller
2008-04-03 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller
[contrib/suse/openssh.spec] Crank version numbers in RPM spec files
2008-04-03 - djm@cvs.openbsd.org 2008/04/03 09:50:14Damien Miller
[version.h] openssh-5.0
2008-04-03 - jmc@cvs.openbsd.org 2008/03/27 22:37:57Damien Miller
[sshd.8] remove trailing whitespace;
2008-04-03 - markus@cvs.openbsd.org 2008/04/02 15:36:51Damien Miller
[channels.c] avoid possible hijacking of x11-forwarded connections (back out 1.183) CVE-2008-1483; ok djm@
2008-03-27 - (djm) Release 4.9p1Damien Miller
2008-03-27 - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]Damien Miller
[contrib/suse/openssh.spec] Crank version numbers in RPM spec files
2008-03-27 - (djm) [README] Update link to release notesDamien Miller
2008-03-27 - (djm) [regress/Makefile] cleanup PuTTY interop test droppingsDamien Miller
2008-03-27 - (djm) [configure.ac] --with-selinux tooDamien Miller
2008-03-27 - (djm) [configure.ac] fix alignment of --without-stackprotect descriptionDamien Miller
2008-03-27 - djm@cvs.openbsd.org 2008/03/24 21:46:54Damien Miller
[regress/sftp-badcmds.sh] disable no-replace rename test now that we prefer a POSIX rename; spotted by dkrause@
2008-03-27 - djm@cvs.openbsd.org 2008/03/27 00:16:49Damien Miller
[version.h] openssh-4.9
2008-03-27 - djm@cvs.openbsd.org 2008/03/26 21:28:14Damien Miller
[auth-options.c auth-options.h session.c sshd.8] add no-user-rc authorized_keys option to disable execution of ~/.ssh/rc
2008-03-27 - djm@cvs.openbsd.org 2008/03/25 23:01:41Damien Miller
[session.c] last patch had backwards test; spotted by termim AT gmail.com
2008-03-27 - djm@cvs.openbsd.org 2008/03/25 11:58:02Damien Miller
[session.c sshd_config.5] ignore ~/.ssh/rc if a sshd_config ForceCommand is specified; from dtucker@ ok deraadt@ djm@
2008-03-27 - deraadt@cvs.openbsd.org 2008/03/24 16:11:07Damien Miller
[monitor_fdpass.c] msg_controllen has to be CMSG_SPACE so that the kernel can account for each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis
2008-03-27 - djm@cvs.openbsd.org 2008/03/23 12:54:01Damien Miller
[sftp-client.c] prefer POSIX-style file renaming over filexfer rename behaviour if the server supports the posix-rename@openssh.com extension. Note that the old (filexfer) behaviour would refuse to clobber an existing file. Users who depended on this should adjust their sftp(1) usage. ok deraadt@ markus@
2008-03-27 - deraadt@cvs.openbsd.org 2008/03/15 16:19:02Damien Miller
[monitor_fdpass.c] Repair the simple cases for msg_controllen where it should just be CMSG_SIZE(sizeof(int)), not sizeof(buffer) which may be larger because of alignment; ok kettenis hshoexer
2008-03-27 - deraadt@cvs.openbsd.org 2008/03/13 01:49:53Damien Miller
[monitor_fdpass.c] Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due to an extensive discussion with otto, kettenis, millert, and hshoexer
2008-03-27 - jmc@cvs.openbsd.org 2008/02/11 07:58:28Damien Miller
[ssh.1 sshd.8 sshd_config.5] bump Mdocdate for pages committed in "febuary", necessary because of a typo in rcs.c;
2008-03-27 - (djm) Fix RCS ident in sftp-server-main.cDamien Miller
2008-03-27 - (dtucker) Cache selinux status earlier so we know if it's enabled after aDarren Tucker
chroot. Allows ChrootDirectory to work with selinux support compiled in but not enabled. Using it with selinux enabled will require some selinux support inside the chroot. "looks sane" djm@
2008-03-15 - (djm) [session.c] Relocate incorrectly-placed closefrom() that was causingDamien Miller
crashes when used with ChrootDirectory
2008-03-15 - (djm) [regress/test-exec.sh] Quote putty-related variables in case they areDamien Miller
empty; report and patch from Peter Stuge - (djm) [regress/test-exec.sh] Silence noise from detection of putty commands; report from Peter Stuge
2008-03-14 - (tim) [regress/localcommand.sh] Shell portability fix. Reported by imorgan atTim Rice
nas.nasa.gov
2008-03-14 - (tim) [regress/sftp-cmds.sh] s/cd/lcd/ in lls test. Reported byTim Rice
vinschen at redhat.com. Add () to put echo commands in subshell for lls test I mistakenly left out of last commit.
2008-03-13forgot to add vinschen at redhat.com on last commitTim Rice
2008-03-13 - (tim) [regress/sftp-cmds.sh regress/ssh2putty.sh] Shell portability fixesTim Rice
from imorgan at nas.nasa.gov
2008-03-13 - (tim) [scp.c] Use poll.h if available, fall back to sys/poll.h if not. PatchTim Rice
by vinschen at redhat.com.
2008-03-13 - (djm) [Makefile.in regress/test-exec.sh] Find installed plink(1) andDamien Miller
puttygen(1) by $PATH
2008-03-13 - (djm) [Makefile.in regress/Makefile] Fix interop-tests target (note toDamien Miller
self: make changes to Makefile.in next time, not the generated Makefile).
2008-03-13 - djm@cvs.openbsd.org 2007/12/21 04:13:53Damien Miller
[regress/Makefile regress/test-exec.sh regress/putty-ciphers.sh] [regress/putty-kex.sh regress/putty-transfer.sh regress/ssh2putty.sh] basic (crypto, kex and transfer) interop regression tests against putty To run these, install putty and run "make interop-tests" from the build directory - the tests aren't run by default yet.
2008-03-12 - djm@cvs.openbsd.org 2007/12/12 05:04:03Damien Miller
[regress/sftp-cmds.sh] unbreak lls command and add a regress test that would have caught the breakage; spotted by mouring@ NB. sftp code change already committed.
2008-03-12 - jmc@cvs.openbsd.org 2007/11/25 15:35:09Damien Miller
[regress/agent-getpeereid.sh regress/agent.sh] more existant -> existent, from Martynas Venckus; pfctl changes: ok henning ssh changes: ok deraadt
2008-03-12 - dtucker@cvs.openbsd.org 2007/10/29 06:57:13Damien Miller
[regress/Makefile regress/localcommand.sh] Add simple regress test for LocalCommand; ok djm@
2008-03-11fix log dateDarren Tucker
2008-03-11 - (dtucker) [auth-pam.c monitor.c session.c sshd.c] Bug #926: MoveDarren Tucker
pam_open_session and pam_close_session into the privsep monitor, which will ensure that pam_session_close is called as root. Patch from Tomas Mraz.
2008-03-09 - (dtucker) [configure.ac] Run stack-protector tests with -Werror to catchDarren Tucker
platforms where gcc understands the option but it's not supported (and thus generates a warning).
2008-03-09 - (dtucker) [openbsd-compat/regress/strtonumtest.c] Bug #1347: Use platform'sDarren Tucker
equivalent of LLONG_MAX for the compat regression tests, which makes them run on AIX and HP-UX. Patch from David Leonard.
2008-03-09 - (dtucker) [openbsd-compat/port-aix.{c,h}] Remove AIX specific initgroupsDarren Tucker
implementation. It's not needed to fix bug #1081 and breaks the build on some AIX configurations.
2008-03-09 - (dtucker) [configure.ac] It turns out gcc's -fstack-protector-all doesn'tDarren Tucker
always work for all platforms and versions, so test what we can and add a configure flag to turn it of if needed. ok djm@
2008-03-07 - (tim) [regress/sftp-glob.sh] Shell portability fix.Tim Rice