Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-10-20 | GSSAPI key exchange support | Simon Wilkinson | |
This patch has been rejected upstream: "None of the OpenSSH developers are in favour of adding this, and this situation has not changed for several years. This is not a slight on Simon's patch, which is of fine quality, but just that a) we don't trust GSSAPI implementations that much and b) we don't like adding new KEX since they are pre-auth attack surface. This one is particularly scary, since it requires hooks out to typically root-owned system resources." However, quite a lot of people rely on this in Debian, and it's better to have it merged into the main openssh package rather than having separate -krb5 packages (as we used to have). It seems to have a generally good security history. Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1242 Last-Updated: 2018-10-20 Patch-Name: gssapi.patch | |||
2018-10-19 | Import openssh_7.9p1.orig.tar.gz | Colin Watson | |
2018-08-24 | Import openssh_7.8p1.orig.tar.gz | Colin Watson | |
2018-04-03 | Import openssh_7.7p1.orig.tar.gz | Colin Watson | |
2017-10-04 | Import openssh_7.6p1.orig.tar.gz | Colin Watson | |
2017-03-29 | Import openssh_7.5p1.orig.tar.gz | Colin Watson | |
2016-12-20 | Import openssh_7.4p1.orig.tar.gz | Colin Watson | |
2016-08-06 | Import openssh_7.3p1.orig.tar.gz | Colin Watson | |
2016-02-29 | Import openssh_7.2p1.orig.tar.gz | Colin Watson | |
2015-08-22 | Import openssh_7.0p1.orig.tar.gz | Colin Watson | |
2015-08-19 | Import openssh_6.8p1.orig.tar.gz | Colin Watson | |
2014-10-07 | Import openssh_6.7p1.orig.tar.gz | Colin Watson | |
2014-03-20 | Import openssh_6.6p1.orig.tar.gz | Colin Watson | |
2014-02-10 | Import openssh_6.5p1.orig.tar.gz | Colin Watson | |
2013-09-14 | Import 6.3p1 tarball | Colin Watson | |
2013-05-07 | Import 6.2p1 tarball | Colin Watson | |
2012-09-06 | Import 6.1p1 tarball | Colin Watson | |
2012-05-17 | Import 6.0p1 tarball | Colin Watson | |
2011-09-06 | Import 5.9p1 tarball | Colin Watson | |
2011-01-24 | Import 5.7p1 tarball | Colin Watson | |
2010-08-23 | Import 5.6p1 tarball | Colin Watson | |
2010-04-16 | Import 5.5p1 tarball | Colin Watson | |
2010-03-31 | Import 5.4p1 tarball | Colin Watson | |
2010-01-24 | Import 5.3p1 tarball | Colin Watson | |
2010-01-01 | Import 5.2p1 tarball | Colin Watson | |
2008-07-22 | Import OpenSSH 5.1p1. | Colin Watson | |
2007-12-23 | Import OpenSSH 4.7p1. | Colin Watson | |
2007-06-12 | Import OpenSSH 4.6p1. | Colin Watson | |
2006-05-12 | Import OpenSSH 4.3p2. | Colin Watson | |
2005-09-14 | Import OpenSSH 4.2p1. | Colin Watson | |
2005-05-30 | Import OpenSSH 4.1p1. | Colin Watson | |
2005-03-10 | Import OpenSSH 4.0p1. | Colin Watson | |
2005-01-04 | Import OpenSSH 3.9p1. | Colin Watson | |
2004-05-01 | Import OpenSSH 3.8.1p1. | Colin Watson | |
2004-03-01 | Import OpenSSH 3.8p1. | Colin Watson | |
2003-09-23 | Import OpenSSH 3.7.1p2. | Colin Watson | |
2003-09-17 | Import OpenSSH 3.7p1. | Colin Watson | |
2003-09-01 | Import OpenSSH 3.6p1. | Colin Watson | |
2003-09-01 | Import OpenSSH 3.5p1. | Colin Watson | |
2003-09-01 | Import OpenSSH 3.4p1. | Colin Watson | |
1999-11-08 | Lots of changes: | Damien Miller | |
- Removed lots of unnecessary checks from autoconf - Added support and autoconf test for openpty() function (Unix98 pty support) - Fix for scp not finding ssh if not installed as /usr/bin/ssh - Added TODO file - Merged parts of Debian patch From Phil Hands <phil@hands.com>: - Added ssh-askpass program - Added ssh-askpass support to ssh-add.c - Create symlinks for slogin on install - Fix "distclean" target in makefile - Added example for ssh-agent to manpage - Added support for PAM_TEXT_INFO messages - Disable internal /etc/nologin support if PAM enabled - Merged latest OpenBSD CVS changes: - [sshd.c] don't send fail-msg but disconnect if too many authentication failures - [sshd.c] replace assert() with error, fatal or packet_disconnect - [sshd.c] remove unused argument. ok dugsong - [sshd.c] typo - [rsa.c] clear buffers used for encryption. ok: niels - [rsa.c] replace assert() with error, fatal or packet_disconnect - Fixed coredump after merge of OpenBSD rsa.c patch | |||
1999-10-29 | - Removed redundant subdirectories | Damien Miller | |
- Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for building on Debian. | |||
1999-10-28 | - Integrated patch from Dan Brosemer <odin@linuxfreak.com> | Damien Miller | |
- Build fixes - Autoconf - Change binary names to open* - Fixed autoconf script to detect PAM on RH6.1 - Added tests for libpwdb, and OpenBSD functions to autoconf (not used yet) |