| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2019-10-09 | New upstream release (8.1p1) | Colin Watson | |
| 2019-10-05 | Deny (non-fatal) shmget/shmat/shmdt in preauth privsep child | Colin Watson | |
| This copes with changes in OpenSSL 1.1.1d that broke OpenSSH on Linux kernels before 3.19. Closes: #941663 | |||
| 2019-06-14 | Fix interop tests for recent regress changes | Colin Watson | |
| 2019-06-09 | Fix utimensat tests when not using compat code | Colin Watson | |
| 2019-06-09 | New upstream release (8.0p1) | Colin Watson | |
| 2019-04-08 | Temporarily revert IPQoS defaults to pre-7.8 values | Colin Watson | |
| This is just until issues with "iptables -m tos" and VMware have been fixed. Closes: #923879, #926229 LP: #1822370 | |||
| 2019-03-01 | Handle shell-style brace expansions in scp checks | Colin Watson | |
| 2019-02-28 | Request RSA-SHA2 signatures for corresponding cert algorithms | Colin Watson | |
| Closes: #923419 | |||
| 2019-02-28 | Fix key type checks with RSA-SHA2 signature types | Colin Watson | |
| 2019-02-08 | scp: Check remote->local directory copy filenames | Colin Watson | |
| CVE-2019-6111 | |||
| 2019-02-08 | Sanitize scp filenames via snmprintf | Colin Watson | |
| CVE-2019-6109 Closes: #793412 | |||
| 2019-01-12 | scp: disallow empty incoming filename or "." | Colin Watson | |
| Closes: #919101 | |||
| 2018-08-30 | Work around conch interoperability failure | Colin Watson | |
| Twisted Conch fails to read private keys in the new format (https://twistedmatrix.com/trac/ticket/9515). Work around this until it can be fixed in Twisted. | |||
| 2018-08-30 | New upstream release (7.8p1) | Colin Watson | |
| Closes: #907534 | |||
| 2018-08-17 | Fix user enumeration vulnerability | Colin Watson | |
| Apply upstream patch to delay bailout for invalid authenticating user until after the packet containing the request has been fully parsed. Closes: #906236 | |||
| 2018-06-28 | [ Christian Ehrhardt ] | Christian Ehrhardt | |
| Fix unintentional restriction of authorized keys environment options to be alphanumeric (LP: #1771011) | |||
| 2018-04-03 | New upstream release (7.7p1) | Colin Watson | |
| 2018-01-16 | Fix putty-transfer regression test. | Colin Watson | |
| 2017-10-07 | Apply upstream patch to fix PermitOpen argument handling. | Colin Watson | |
| 2017-10-05 | New upstream release (7.6p1) | Colin Watson | |
| 2017-08-28 | Apply patches from https://bugzilla.mindrot.org/show_bug.cgi?id=2752 to ↵ | Colin Watson | |
| allow some extra syscalls for crypto cards on s390x (LP: #1686618). | |||
| 2017-08-22 | Drop Upstart-specific patches | Colin Watson | |
| 2017-06-06 | Fix incoming compression statistics (thanks, Russell Coker; closes: #797964). | Colin Watson | |
| 2017-04-02 | Fix syntax error on Linux/X32 | Colin Watson | |
| 2017-04-02 | Add missing header on Linux/s390 | Colin Watson | |
| 2017-04-02 | New upstream release (7.5p1) | Colin Watson | |
| 2017-03-30 | Unbreak Unix domain socket forwarding for root (closes: #858252). | Colin Watson | |
| 2017-03-16 | Fix null pointer dereference in ssh-keygen; this fixes an autopkgtest ↵ | Colin Watson | |
| regression introduced in 1:7.4p1-8. | |||
| 2017-03-14 | Fix ssh-keyscan to correctly hash hosts with a port number (closes: #857736, ↵ | Colin Watson | |
| LP: #1670745). | |||
| 2017-03-09 | Fix ssh-keygen -H accidentally corrupting known_hosts that contained ↵ | Colin Watson | |
| already-hashed entries (closes: #851734, LP: #1668093). | |||
| 2017-03-05 | Restore reading authorized_keys2 by default | Colin Watson | |
| Upstream seems to intend to gradually phase this out, so don't assume that this will remain the default forever. However, we were late in adopting the upstream sshd_config changes, so it makes sense to extend the grace period (closes: #852320). | |||
| 2017-01-16 | Remove ssh_host_dsa_key from HostKey default (closes: #850614). | Colin Watson | |
| 2017-01-03 | Work around clock_gettime kernel bug on Linux x32 (closes: #849923). | Colin Watson | |
| 2017-01-03 | Create mux socket for regression tests in a temporary directory. | Colin Watson | |
| 2017-01-02 | merge patched into master | Colin Watson | |
| 2017-01-01 | Make integrity tests more robust against timeouts in the case where the ↵ | Colin Watson | |
| first test in a series for a given MAC happens to modify the low bytes of a packet length. | |||
| 2016-12-23 | New upstream release (7.4p1). | Colin Watson | |
| 2016-11-19 | Fix and enable PuTTY interoperability tests under autopkgtest. | Colin Watson | |
| 2016-10-24 | CVE-2016-8858: Unregister the KEXINIT handler after message has been ↵ | Colin Watson | |
| received (closes: #841884). | |||
| 2016-08-07 | New upstream release (7.3p1). | Colin Watson | |
| 2016-07-22 | Backport upstream patch to close ControlPersist background process stderr ↵ | Colin Watson | |
| when not in debug mode or when logging to a file or syslog (closes: #714526). | |||
| 2016-07-22 | CVE-2016-6210: Mitigate user enumeration via covert timing channel. | Colin Watson | |
| 2016-04-28 | Backport upstream patch to unbreak authentication using lone certificate ↵ | Colin Watson | |
| keys in ssh-agent: when attempting pubkey auth with a certificate, if no separate private key is found among the keys then try with the certificate key itself (thanks, Paul Querna; LP: #1575961). | |||
| 2016-04-13 | CVE-2015-8325: Ignore PAM environment vars when UseLogin=yes. | Colin Watson | |
| 2016-03-08 | New upstream release (7.2). | Colin Watson | |
| 2016-01-14 | New upstream release (7.1p2). | Colin Watson | |
| 2015-12-21 | Add systemd readiness notification support (closes: #778913). | Michael Biebl | |
| 2015-12-15 | Backport upstream patch to unbreak connections with peers that set ↵ | Colin Watson | |
| first_kex_follows (LP: #1526357). | |||
| 2015-12-03 | Drop SSH1 keepalive patch. Now that SSH1 is disabled at compile-time, it's ↵ | Colin Watson | |
| been rejected upstream and there isn't much point carrying it any more. | |||
| 2015-11-29 | New upstream release (7.0p1). | Colin Watson | |
 |
index : openssh.git | |
| summaryrefslogtreecommitdiff |