openssh.git -

Age	Commit message (Collapse)	Author
2018-08-24	GSSAPI key exchange support	Simon Wilkinson
	This patch has been rejected upstream: "None of the OpenSSH developers are in favour of adding this, and this situation has not changed for several years. This is not a slight on Simon's patch, which is of fine quality, but just that a) we don't trust GSSAPI implementations that much and b) we don't like adding new KEX since they are pre-auth attack surface. This one is particularly scary, since it requires hooks out to typically root-owned system resources." However, quite a lot of people rely on this in Debian, and it's better to have it merged into the main openssh package rather than having separate -krb5 packages (as we used to have). It seems to have a generally good security history. Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1242 Last-Updated: 2018-08-24 Patch-Name: gssapi.patch
2018-08-24	Import openssh_7.8p1.orig.tar.gz	Colin Watson

2018-04-03	Import openssh_7.7p1.orig.tar.gz	Colin Watson

2017-10-04	Import openssh_7.6p1.orig.tar.gz	Colin Watson

2017-03-29	Import openssh_7.5p1.orig.tar.gz	Colin Watson

2016-12-20	Import openssh_7.4p1.orig.tar.gz	Colin Watson

2016-08-06	Import openssh_7.3p1.orig.tar.gz	Colin Watson

2016-02-29	Import openssh_7.2p1.orig.tar.gz	Colin Watson

2015-08-22	Import openssh_7.0p1.orig.tar.gz	Colin Watson

2015-08-19	Import openssh_6.8p1.orig.tar.gz	Colin Watson

2014-10-07	Import openssh_6.7p1.orig.tar.gz	Colin Watson

2014-03-20	Import openssh_6.6p1.orig.tar.gz	Colin Watson

2014-02-10	Import openssh_6.5p1.orig.tar.gz	Colin Watson

2013-09-14	Import 6.3p1 tarball	Colin Watson

2013-05-07	Import 6.2p1 tarball	Colin Watson

2012-09-06	Import 6.1p1 tarball	Colin Watson

2012-05-17	Import 6.0p1 tarball	Colin Watson

2011-09-06	Import 5.9p1 tarball	Colin Watson

2011-01-24	Import 5.7p1 tarball	Colin Watson

2010-08-23	Import 5.6p1 tarball	Colin Watson

2010-04-16	Import 5.5p1 tarball	Colin Watson

2010-03-31	Import 5.4p1 tarball	Colin Watson

2010-01-24	Import 5.3p1 tarball	Colin Watson

2010-01-01	Import 5.2p1 tarball	Colin Watson

2008-07-22	Import OpenSSH 5.1p1.	Colin Watson

2007-12-23	Import OpenSSH 4.7p1.	Colin Watson

2007-06-12	Import OpenSSH 4.6p1.	Colin Watson

2006-05-12	Import OpenSSH 4.3p2.	Colin Watson

2005-09-14	Import OpenSSH 4.2p1.	Colin Watson

2005-05-30	Import OpenSSH 4.1p1.	Colin Watson

2005-03-10	Import OpenSSH 4.0p1.	Colin Watson

2005-01-04	Import OpenSSH 3.9p1.	Colin Watson

2004-05-01	Import OpenSSH 3.8.1p1.	Colin Watson

2004-03-01	Import OpenSSH 3.8p1.	Colin Watson

2003-09-23	Import OpenSSH 3.7.1p2.	Colin Watson

2003-09-17	Import OpenSSH 3.7p1.	Colin Watson

2003-09-01	Import OpenSSH 3.6p1.	Colin Watson

2003-09-01	Import OpenSSH 3.5p1.	Colin Watson

2003-09-01	Import OpenSSH 3.4p1.	Colin Watson

1999-11-08	Lots of changes:	Damien Miller
	- Removed lots of unnecessary checks from autoconf - Added support and autoconf test for openpty() function (Unix98 pty support) - Fix for scp not finding ssh if not installed as /usr/bin/ssh - Added TODO file - Merged parts of Debian patch From Phil Hands <phil@hands.com>: - Added ssh-askpass program - Added ssh-askpass support to ssh-add.c - Create symlinks for slogin on install - Fix "distclean" target in makefile - Added example for ssh-agent to manpage - Added support for PAM_TEXT_INFO messages - Disable internal /etc/nologin support if PAM enabled - Merged latest OpenBSD CVS changes: - [sshd.c] don't send fail-msg but disconnect if too many authentication failures - [sshd.c] replace assert() with error, fatal or packet_disconnect - [sshd.c] remove unused argument. ok dugsong - [sshd.c] typo - [rsa.c] clear buffers used for encryption. ok: niels - [rsa.c] replace assert() with error, fatal or packet_disconnect - Fixed coredump after merge of OpenBSD rsa.c patch
1999-10-29	- Removed redundant subdirectories	Damien Miller
	- Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for building on Debian.
1999-10-28	- Integrated patch from Dan Brosemer <odin@linuxfreak.com>	Damien Miller
	- Build fixes - Autoconf - Change binary names to open* - Fixed autoconf script to detect PAM on RH6.1 - Added tests for libpwdb, and OpenBSD functions to autoconf (not used yet)