Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-05-22 | * Remove the check for vulnerable host keys; this was first added five | Colin Watson | |
years ago, and everyone should have upgraded through a version that applied these checks by now. The ssh-vulnkey tool and the blacklisting support in sshd are still here, at least for the moment. * This removes the last of our uses of debconf (closes: #221531). | |||
2013-05-22 | Switch to new unified layout for Upstart jobs as documented in | Colin Watson | |
https://wiki.ubuntu.com/UpstartCompatibleInitScripts: the init script checks for a running Upstart, and we now let dh_installinit handle most of the heavy lifting in maintainer scripts. Ubuntu users should be essentially unaffected except that sshd may no longer start automatically in chroots if the running Upstart predates 0.9.0; but the main goal is simply not to break when openssh-server is installed in a chroot. | |||
2013-05-22 | Replace old manual conffile handling code with dpkg-maintscript-helper, | Colin Watson | |
via dh_installdeb. | |||
2013-05-22 | Remove lots of maintainer script support for upgrades from pre-etch | Colin Watson | |
(three releases before current stable). | |||
2013-05-06 | Use dh-autoreconf. | Colin Watson | |
2012-12-19 | Give ssh and ssh-krb5 versioned dependencies on openssh-client and | Colin Watson | |
openssh-server, to try to reduce confusion when people run 'apt-get install ssh' or similar and expect that to upgrade everything relevant. | |||
2012-11-26 | Merge Upstart job scripting support from Ubuntu, to handle the Upstart job ↵ | Colin Watson | |
being primary there. | |||
2012-10-31 | Drop openssh-blacklist and openssh-blacklist-extra to Suggests. It's | Colin Watson | |
been long enough since the relevant vulnerability that we shouldn't need these installed by default nowadays. | |||
2012-10-31 | * Merge from Ubuntu: | Colin Watson | |
- Add support for registering ConsoleKit sessions on login. (This is currently enabled only when building for Ubuntu.) | |||
2012-08-24 | Add ncurses-term to openssh-server's Recommends, since it's often needed | Colin Watson | |
to support unusual terminal emulators on clients (closes: #675362). | |||
2012-04-01 | Use dpkg-buildflags, including for hardening support; drop use of | Colin Watson | |
hardening-includes. | |||
2012-02-24 | Move ssh-krb5 to Section: oldlibs. | Colin Watson | |
2011-11-09 | Mark openssh-client and openssh-server as Multi-Arch: foreign. | Colin Watson | |
2011-07-29 | Only recommend ssh-import-id when built on Ubuntu (closes: #635887). | Colin Watson | |
2011-07-28 | * Merge from Ubuntu (Dustin Kirkland): | Colin Watson | |
- openssh-server Recommends: ssh-import-id (no-op in Debian since that package doesn't exist there, but this reduces the Ubuntu delta). | |||
2011-07-28 | openssh-client and openssh-server Suggests: monkeysphere. | Colin Watson | |
2011-05-30 | Update Vcs-* fields for Alioth changes. | Colin Watson | |
2011-04-13 | Drop openssh-server's dependency on openssh-blacklist to a | Colin Watson | |
recommendation (closes: #622604). | |||
2011-04-04 | Drop hardcoded dependencies on libssl0.9.8 and libcrypto0.9.8-udeb, | Colin Watson | |
since the required minimum versions are rather old now anyway and openssl has bumped its SONAME (thanks, Julien Cristau; closes: #620828). | |||
2011-01-24 | Build-depend on libssl-dev (>= 0.9.8g) to ensure sufficient ECC support. | Colin Watson | |
2010-08-05 | Use an architecture wildcard for libselinux1-dev (closes: #591740). | Colin Watson | |
2010-05-04 | Add powerpcspe to architecture list for libselinux1-dev build-dependency | Sebastian Andrzej Siewior | |
(closes: #579843). | |||
2010-04-07 | Drop lpia support, since Ubuntu no longer supports this architecture. | Colin Watson | |
2010-04-07 | Convert to dh(1), and use dh_installdocs --link-doc. | Colin Watson | |
2010-04-03 | * Policy version 3.8.4: | Colin Watson | |
- Add a Homepage field. | |||
2010-03-01 | Include debian/ssh-askpass-gnome.png in the Debian tarball now that | Colin Watson | |
we're using a source format that permits this, rather than messing around with uudecode. | |||
2010-01-04 | Adjust short descriptions to avoid relying on previous experience with | Colin Watson | |
rsh, based on suggestions from Reuben Thomas (closes: #512198). | |||
2010-01-02 | Use hardening-includes for hardening logic (thanks, Kees Cook; closes: | Colin Watson | |
#561887). | |||
2009-12-21 | Moved to bzr.debian.org; add Vcs-Bzr and Vcs-Browser control fields. | Colin Watson | |
2009-09-17 | Build-depend on libselinux1-dev on sh4 too (thanks, Nobuhiro Iwamatsu; | Colin Watson | |
closes: #547103). | |||
2009-07-31 | Upgrade to debhelper v7. | Colin Watson | |
2009-07-31 | Add ${misc:Depends} to keep Lintian happy. | Colin Watson | |
2009-01-28 | Add ufw integration (thanks, Didier Roche; see | Colin Watson | |
https://wiki.ubuntu.com/UbuntuFirewall#Integrating%20UFW%20with%20Packages; LP: #261884). | |||
2009-01-13 | Check that /var/run/sshd.pid exists and that the process ID listed there | Colin Watson | |
corresponds to sshd before running '/etc/init.d/ssh reload' from if-up script; SIGHUP is racy if called at boot before sshd has a chance to install its signal handler, but fortunately the pid file is written after that which lets us avoid the race (closes: #502444). | |||
2008-07-23 | * Merge from Ubuntu: | Colin Watson | |
- Add 'status' action to openssh-server init script, requiring lsb-base (>= 3.2-13) (thanks, Dustin Kirkland). | |||
2008-07-22 | Say "GTK+" rather than "GTK" in ssh-askpass-gnome's description. | Colin Watson | |
2008-06-08 | Change openssh-client-udeb's Installer-Menu-Item from 99900 to 99999 | Colin Watson | |
(thanks, Frans Pop). | |||
2008-05-26 | Allow building with heimdal-dev (LP: #125805). | Colin Watson | |
2008-05-21 | Recommend openssh-blacklist-extra from openssh-client and | Colin Watson | |
openssh-server. | |||
2008-05-21 | Recommend openssh-blacklist from openssh-client. | Colin Watson | |
2008-05-12 | * Mitigate OpenSSL security vulnerability: | Colin Watson | |
- Add key blacklisting support. Keys listed in /etc/ssh/blacklist.TYPE-LENGTH will be rejected for authentication by sshd, unless "PermitBlacklistedKeys yes" is set in /etc/ssh/sshd_config. - Add a new program, ssh-vulnkey, which can be used to check keys against these blacklists. - Depend on openssh-blacklist. - Force dependencies on libssl0.9.8 / libcrypto0.9.8-udeb to at least 0.9.8g-9. - Automatically regenerate known-compromised host keys, with a critical-priority debconf note. (I regret that there was no time to gather translations.) | |||
2008-02-27 | * Recommends: xauth rather than Suggests: xbase-clients. | Colin Watson | |
2008-01-12 | * Improve grammar of ssh-askpass-gnome description. | Colin Watson | |
2008-01-11 | * Drop source-compatibility with Debian 3.0: | Colin Watson | |
- Remove support for building with GNOME 1. This allows simplification of our GNOME build-dependencies (see #460136). - Remove hacks to support the old PAM configuration scheme. - Remove compatibility for building without po-debconf. * Build-depend on libgtk2.0-dev rather than libgnomeui-dev. As far as I can see, the GTK2 version of ssh-askpass-gnome has never required libgnomeui-dev. | |||
2008-01-10 | * Add armel to architecture list for libselinux1-dev build-dependency | Colin Watson | |
(closes: #460136). | |||
2008-01-10 | * Pass --with-mantype=doc to configure rather than build-depending on | Colin Watson | |
groff (closes: #460121). | |||
2007-12-24 | * Policy version 3.7.3: no changes required. | Colin Watson | |
2007-07-30 | * openssh-client Suggests: keychain. | Colin Watson | |
2007-07-28 | * Build-depend on libselinux1-dev on lpia. | Colin Watson | |
2007-07-07 | * Identify ssh as a metapackage rather than a transitional package. It's | Colin Watson | |
still useful as a quick way to install both the client and the server. |