Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-04-02 | Fix syntax error on Linux/X32 | Colin Watson | |
2017-04-02 | Add missing header on Linux/s390 | Colin Watson | |
2017-04-02 | releasing package openssh version 1:7.5p1-1 | Colin Watson | |
2017-04-02 | New upstream release (7.5p1) | Colin Watson | |
2017-03-30 | releasing package openssh version 1:7.4p1-10 | Colin Watson | |
2017-03-30 | Unbreak Unix domain socket forwarding for root (closes: #858252). | Colin Watson | |
2017-03-30 | Move privilege separation directory and PID file from /var/run/ to /run/ ↵ | Colin Watson | |
(closes: #760422, #856825). | |||
2017-03-16 | releasing package openssh version 1:7.4p1-9 | Colin Watson | |
2017-03-16 | Fix null pointer dereference in ssh-keygen; this fixes an autopkgtest ↵ | Colin Watson | |
regression introduced in 1:7.4p1-8. | |||
2017-03-15 | releasing package openssh version 1:7.4p1-8 | Colin Watson | |
2017-03-14 | Fix ssh-keyscan to correctly hash hosts with a port number (closes: #857736, ↵ | Colin Watson | |
LP: #1670745). | |||
2017-03-09 | Fix ssh-keygen -H accidentally corrupting known_hosts that contained ↵ | Colin Watson | |
already-hashed entries (closes: #851734, LP: #1668093). | |||
2017-03-05 | releasing package openssh version 1:7.4p1-7 | Colin Watson | |
2017-03-05 | Restore reading authorized_keys2 by default | Colin Watson | |
Upstream seems to intend to gradually phase this out, so don't assume that this will remain the default forever. However, we were late in adopting the upstream sshd_config changes, so it makes sense to extend the grace period (closes: #852320). | |||
2017-01-29 | Don't set "PermitRootLogin yes" on fresh installations (regression ↵ | Colin Watson | |
introduced in 1:7.4p1-1; closes: #852781). | |||
2017-01-16 | releasing package openssh version 1:7.4p1-6 | Colin Watson | |
2017-01-16 | Rekeying patch fixes LP: #1608965 too | Colin Watson | |
2017-01-16 | Fix rekeying failure with GSSAPI key exchange (thanks, Harald Barth; closes: ↵ | Colin Watson | |
#819361). | |||
2017-01-16 | Remove ssh_host_dsa_key from HostKey default (closes: #850614). | Colin Watson | |
2017-01-16 | Document sshd_config changes that may be needed following the removal of ↵ | Colin Watson | |
protocol 1 support from sshd (closes: #851573). | |||
2017-01-15 | Remove LOGIN_PROGRAM and LOGIN_NO_ENDOPT definitions, since UseLogin is gone. | Colin Watson | |
2017-01-06 | Remove temporary file on exit from postinst (closes: #850275). | Colin Watson | |
2017-01-03 | releasing package openssh version 1:7.4p1-5 | Colin Watson | |
2017-01-03 | Work around clock_gettime kernel bug on Linux x32 (closes: #849923). | Colin Watson | |
2017-01-03 | Create mux socket for regression tests in a temporary directory. | Colin Watson | |
2017-01-02 | releasing package openssh version 1:7.4p1-4 | Colin Watson | |
2017-01-02 | merge patched into master | Colin Watson | |
2017-01-01 | Make integrity tests more robust against timeouts in the case where the ↵ | Colin Watson | |
first test in a series for a given MAC happens to modify the low bytes of a packet length. | |||
2017-01-01 | Run regression tests inside annotate-output to try to diagnose timeout issues. | Colin Watson | |
2016-12-31 | releasing package openssh version 1:7.4p1-3 | Colin Watson | |
2016-12-31 | Tweak regression test setup to cope with the case where some of the source ↵ | Colin Watson | |
directory is unreadable by the openssh-tests user. | |||
2016-12-31 | Dump some useful log files if regression tests fail. | Colin Watson | |
2016-12-31 | Run regression tests using 'sh -x' to try to get more information about ↵ | Colin Watson | |
failures. | |||
2016-12-31 | Revert attempted hack around regress/forwarding.sh test failure, since it ↵ | Colin Watson | |
doesn't seem to help. | |||
2016-12-29 | releasing package openssh version 1:7.4p1-2 | Colin Watson | |
2016-12-28 | Avoid calling into Kerberos libraries from ssh_gssapi_server_mechanisms in ↵ | Colin Watson | |
the privsep monitor. | |||
2016-12-28 | Attempt to hack around regress/forwarding.sh test failure in some environments. | Colin Watson | |
2016-12-27 | releasing package openssh version 1:7.4p1-1 | Colin Watson | |
2016-12-27 | When running regression tests under autopkgtest, use a non-root user with ↵ | Colin Watson | |
passwordless sudo. | |||
2016-12-26 | Build gnome-ssh-askpass with GTK+ 3 (LP: #801187). | Colin Watson | |
2016-12-26 | Remove redundant "GSSAPIDelegateCredentials no" from ssh_config (already the ↵ | Colin Watson | |
upstream default), and document that setting ServerAliveInterval to 300 by default if BatchMode is set is Debian-specific (closes: #765630). | |||
2016-12-26 | Start handling /etc/ssh/sshd_config using ucf. | Colin Watson | |
* Start handling /etc/ssh/sshd_config using ucf. The immediate motivation for this is to deal with deprecations of options related to protocol 1, but something like this has been needed for a long time (closes: #419574, #848089): - sshd_config is now a slightly-patched version of upstream's, and only contains non-default settings (closes: #147201). - I've included as many historical md5sums of default versions of sshd_config as I could reconstruct from version control, but I'm sure I've missed some. - Explicitly synchronise the debconf database with the current configuration file state in openssh-server.config, to ensure that the PermitRootLogin setting is properly preserved. - UsePrivilegeSeparation now defaults to the stronger "sandbox" rather than "yes", per upstream. | |||
2016-12-23 | Remove some advice related to protocol 1 from README.Debian. | Colin Watson | |
2016-12-23 | Remove entries related to protocol 1 from the default sshd_config generated ↵ | Colin Watson | |
on new installations. | |||
2016-12-23 | New upstream release (7.4p1). | Colin Watson | |
2016-12-05 | wrap-and-sort debian/tests/control too | Colin Watson | |
2016-12-05 | Apply "wrap-and-sort -atf debian/control". | Colin Watson | |
2016-12-03 | releasing package openssh version 1:7.3p1-5 | Colin Watson | |
2016-12-03 | debian/tests/control: Add dependency on openssl, required by the PuTTY ↵ | Colin Watson | |
interoperability tests. | |||
2016-12-02 | releasing package openssh version 1:7.3p1-4 | Colin Watson | |