Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-09-29 | - CVE-2006-5051: Fix an unsafe signal hander reported by Mark Dowd. The | Colin Watson | |
signal handler was vulnerable to a race condition that could be exploited to perform a pre-authentication denial of service. On portable OpenSSH, this vulnerability could theoretically lead to pre-authentication remote code execution if GSSAPI authentication is enabled, but the likelihood of successful exploitation appears remote. | |||
2006-09-29 | * Backport from 4.4p1 (since I don't have an updated version of the GSSAPI | Colin Watson | |
patch yet): - CVE-2006-4924: Fix a pre-authentication denial of service found by Tavis Ormandy, that would cause sshd(8) to spin until the login grace time expired (closes: #389995). | |||
2006-09-29 | * Make ssh/insecure_telnetd Type: error (closes: #388946). | Colin Watson | |
2006-09-29 | * Remove no-longer-used ssh/insecure_rshd debconf template. | Colin Watson | |
2006-09-29 | * Read /etc/default/locale as well as /etc/environment (thanks, Raphaël | Colin Watson | |
Hertzog; closes: #369395). | |||
2006-08-20 | - Update Spanish (thanks, Javier Fernández-Sanguino Peña; | Colin Watson | |
closes: #382966). | |||
2006-08-08 | * debconf template translations: | Colin Watson | |
- Update Portuguese (thanks, Rui Branco; closes: #381942). | |||
2006-07-27 | releasing version 1:4.3p2-3 | Colin Watson | |
2006-07-26 | - Update Japanese (thanks, Kenshi Muto; closes: #379950). | Colin Watson | |
2006-07-14 | * Change sshd user's shell to /usr/sbin/nologin (closes: #366541). | Colin Watson | |
Introduces dependency on passwd for usermod. | |||
2006-07-03 | * Document KeepAlive->TCPKeepAlive renaming in sshd_config(5) (closes: | Colin Watson | |
https://launchpad.net/bugs/50702). | |||
2006-06-25 | - Update Dutch (thanks, Bart Cornelis; closes: #375100). | Colin Watson | |
2006-05-22 | * debconf template translations: | Colin Watson | |
- Update French (thanks, Denis Barbier; closes: #368503). | |||
2006-05-19 | releasing version 1:4.3p2-2 | Colin Watson | |
2006-05-19 | - Update Swedish (thanks, Daniel Nylander; closes: #367971). | Colin Watson | |
2006-05-17 | * On '/etc/init.d/ssh restart', create /var/run/sshd before checking the | Colin Watson | |
server configuration, as otherwise 'sshd -t' will complain about the lack of /var/run/sshd (closes: https://launchpad.net/bugs/45234). | |||
2006-05-16 | * Include commented-out pam_access example in /etc/pam.d/ssh. | Colin Watson | |
2006-05-15 | - Update Galician (thanks, Jacobo Tarrio; closes: #367318). | Colin Watson | |
2006-05-14 | - Update Italian (thanks, Luca Monducci; closes: #367186). | Colin Watson | |
2006-05-14 | - Update Czech (thanks, Miroslav Kure; closes: #367161). | Colin Watson | |
2006-05-14 | * debconf template translations: | Colin Watson | |
- Update Russian (thanks, Yuriy Talakan'; closes: #367143). | |||
2006-05-12 | releasing version 1:4.3p2-1 | Colin Watson | |
2006-05-12 | * Ship README.tun. | Colin Watson | |
2006-05-12 | * Policy version 3.7.2: no changes required. | Colin Watson | |
2006-05-12 | * Restore pam_nologin to /etc/pam.d/ssh; sshd no longer checks this itself | Colin Watson | |
when PAM is enabled, but relies on PAM to do it. | |||
2006-05-12 | * Rephrase ssh/new_config and ssh/encrypted_host_key_but_no_keygen debconf | Colin Watson | |
templates to make boolean short descriptions end with a question mark and to avoid use of the first person. | |||
2006-05-12 | * debian/rules: Resynchronise CFLAGS with that generated by configure. | Colin Watson | |
2006-05-12 | * Update to current GSSAPI patch from | Colin Watson | |
http://www.sxw.org.uk/computing/patches/openssh-4.3p2-gsskex-20060223.patch (closes: #352042). | |||
2006-05-12 | Merge 4.3p2 to the trunk. | Colin Watson | |
2006-04-16 | * Rename KeepAlive to TCPKeepAlive in default sshd_config | Colin Watson | |
(closes: #349896). | |||
2006-04-07 | - Add Galician (thanks, Jacobo Tarrio; closes: #361220). | Colin Watson | |
2006-04-01 | * debconf template translations: | Colin Watson | |
- Update Italian (thanks, Luca Monducci; closes: #360348). | |||
2006-03-31 | releasing version 1:4.2p1-8 | Colin Watson | |
2006-03-31 | * Switch to debhelper compatibility level 4, since we now require | Colin Watson | |
debhelper 4 even on sarge anyway for udeb support. | |||
2006-03-31 | close #360068 | Colin Watson | |
2006-03-31 | * Use udeb support introduced in debhelper 4.2.0 (available in sarge) | Colin Watson | |
rather than constructing udebs by steam. * Require debhelper 5.0.22, which generates correct shared library dependencies for udebs. This build-dependency can be ignored if building on sarge. | |||
2006-03-01 | releasing version 1:4.2p1-7 | Colin Watson | |
2006-03-01 | * I accidentally applied the default $PATH change in 1:4.2p1-6 to the udeb | Colin Watson | |
rather than the deb. Fixed. | |||
2006-02-20 | releasing version 1:4.2p1-6 | Colin Watson | |
2005-11-30 | - Correct erroneously-changed Last-Translator headers in Greek and | Colin Watson | |
Spanish translations. | |||
2005-11-30 | - Update Spanish (thanks, Javier Fernández-Sanguino Peña; | Colin Watson | |
closes: #341371). | |||
2005-11-27 | * When the client receives a signal, don't fatal() with "Killed by signal | Colin Watson | |
%d." (which produces unhelpful noise on stderr and causes confusion for users of some applications that wrap ssh); instead, generate a debug message and exit with the traditional status (closes: #313371). | |||
2005-10-10 | * debconf template translations: | Colin Watson | |
- Add Swedish (thanks, Daniel Nylander; closes: #333133). | |||
2005-10-10 | * Sync default values of $PATH from shadow 1:4.0.12-6, adding /usr/bin/X11 | Colin Watson | |
to the normal and superuser paths and /usr/games to the normal path. | |||
2005-10-07 | releasing version 1:4.2p1-5 | Colin Watson | |
2005-10-07 | * Build-depend on libssl-dev (>= 0.9.8-1) to cope with surprise OpenSSL | Colin Watson | |
transition, since otherwise who knows what the buildds will do. If you're building openssh yourself, you can safely ignore this and use an older libssl-dev. | |||
2005-10-07 | * Only send GSSAPI proposal if GSSAPIAuthentication is enabled. | Colin Watson | |
2005-10-06 | * Build-depend on libselinux1-dev on armeb. | Colin Watson | |
2005-10-03 | * Add a CVE name to the 1:4.0p1-1 changelog entry. | Colin Watson | |
2005-09-16 | releasing version 1:4.2p1-4 | Colin Watson | |