summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2007-12-24* Remove the hideously old /etc/ssh/primes on upgrade (closes: #123013).Colin Watson
2007-12-24* Refactor debian/rules configure and make invocations to make developmentColin Watson
easier.
2007-12-24* Fix "overriden" typo in ssh(1) (thanks, A. Costa; closes: #390699).Colin Watson
2007-12-24* Create /var/run/sshd on start even if /etc/ssh/sshd_not_to_be_run existsColin Watson
(closes: #453285).
2007-12-24* Install the OpenSSH FAQ in /usr/share/doc/openssh-client.Colin Watson
- Includes documentation on copying files with colons using scp (closes: #303453).
2007-12-24* New upstream release (closes: #453367).Colin Watson
- CVE-2007-4752: Prevent ssh(1) from using a trusted X11 cookie if creation of an untrusted cookie fails; found and fixed by Jan Pechanec (closes: #444738). - sshd(8) in new installations defaults to SSH Protocol 2 only. Existing installations are unchanged. - The SSH channel window size has been increased, and both ssh(1) sshd(8) now send window updates more aggressively. These improves performance on high-BDP (Bandwidth Delay Product) networks. - ssh(1) and sshd(8) now preserve MAC contexts between packets, which saves 2 hash calls per packet and results in 12-16% speedup for arcfour256/hmac-md5. - A new MAC algorithm has been added, UMAC-64 (RFC4418) as "umac-64@openssh.com". UMAC-64 has been measured to be approximately 20% faster than HMAC-MD5. - Failure to establish a ssh(1) TunnelForward is now treated as a fatal error when the ExitOnForwardFailure option is set. - ssh(1) returns a sensible exit status if the control master goes away without passing the full exit status. - When using a ProxyCommand in ssh(1), set the outgoing hostname with gethostname(2), allowing hostbased authentication to work. - Make scp(1) skip FIFOs rather than hanging (closes: #246774). - Encode non-printing characters in scp(1) filenames. These could cause copies to be aborted with a "protocol error". - Handle SIGINT in sshd(8) privilege separation child process to ensure that wtmp and lastlog records are correctly updated. - Report GSSAPI mechanism in errors, for libraries that support multiple mechanisms. - Improve documentation for ssh-add(1)'s -d option. - Rearrange and tidy GSSAPI code, removing server-only code being linked into the client. - Delay execution of ssh(1)'s LocalCommand until after all forwardings have been established. - In scp(1), do not truncate non-regular files. - Improve exit message from ControlMaster clients. - Prevent sftp-server(8) from reading until it runs out of buffer space, whereupon it would exit with a fatal error (closes: #365541). - pam_end() was not being called if authentication failed (closes: #405041). - Manual page datestamps updated (closes: #433181).
2007-12-03releasing version 1:4.6p1-7Colin Watson
2007-12-03* Check whether deluser exists in postrm (closes: #454085).Colin Watson
2007-11-20* Adjust README.Debian to suggest mailing debian-ssh@lists.debian.orgColin Watson
rather than Matthew.
2007-11-17* Use autotools-dev's recommended configure --build and --host options.Colin Watson
2007-11-14* Don't build PIE executables on m68k (closes: #451192).Colin Watson
2007-11-12revert previous commit; ftruncate is needed to shorten a previously-existing ↵Colin Watson
file
2007-11-12* Make scp only ftruncate if it hasn'\''t written the required number ofColin Watson
bytes (works around #447153).
2007-11-12releasing version 1:4.6p1-6Colin Watson
2007-11-12authorized_keys.5 belongs in openssh-serverColin Watson
2007-11-12* Adjust categories in ssh-askpass-gnome.desktop to comply with theColin Watson
Desktop Menu Specification.
2007-11-12* Don't ignore errors from 'make -C contrib clean'.Colin Watson
2007-11-12* Suppress error from debian/rules if lsb-release is not installed.Colin Watson
2007-11-08* Fix sshd/inittab advice in README.Debian to account for rc.d movementColin Watson
(closes: #450632).
2007-10-18 - Update Brazilian Portuguese (thanks, Eder L. Marques;Colin Watson
closes: #447145).
2007-10-18* Discard error output from dpkg-query in preinsts, in case the sshColin Watson
metapackage is not installed.
2007-09-12* Install authorized_keys(5) as a symlink to sshd(8) (thanks, TomasColin Watson
Pospisek; closes: #441817).
2007-09-12* debconf template translations:Colin Watson
- Add Slovak (thanks, Ivan Masár; closes: #441690).
2007-09-12* Remove blank line between head comment and first template inColin Watson
debian/openssh-server.templates.master; apparently it confuses some versions of debconf.
2007-07-30releasing version 1:4.6p1-5Colin Watson
2007-07-30* openssh-client Suggests: keychain.Colin Watson
2007-07-28* Build-depend on libselinux1-dev on lpia.Colin Watson
2007-07-17* ssh-copy-id defaults to ~/.ssh/id_rsa.pub rather thanColin Watson
~/.ssh/identity.pub, in line with ssh-keygen (thanks, Greg Norris; closes: #234627).
2007-07-17clarifyColin Watson
2007-07-17* ssh-copy-id no longer prints the output of expr (thanks, PeterColin Watson
Eisentraut; closes: #291534).
2007-07-17* ssh-copy-id checks the exit status of ssh-add -L (thanks, Adeodato Simó;Colin Watson
closes: #221675).
2007-07-07* Identify ssh as a metapackage rather than a transitional package. It'sColin Watson
still useful as a quick way to install both the client and the server.
2007-07-06* debconf template translations:Colin Watson
- Update Catalan (thanks, Jordà Polo; closes: #431970).
2007-07-05releasing version 1:4.6p1-4Colin Watson
2007-07-05* Don't build PIE executables on hppa, as they crash.Colin Watson
2007-06-29releasing version 1:4.6p1-3Colin Watson
2007-06-29fix syntaxColin Watson
2007-06-29* Document that HashKnownHosts may break tab-completion (closes: #430154).Colin Watson
2007-06-27* Fix broken switch fallthrough when SELinux is running in permissive modeColin Watson
(closes: #430838).
2007-06-26* Only build PIE executables on Linux and NetBSD (closes: #430455).Colin Watson
2007-06-20releasing version 1:4.6p1-2Colin Watson
2007-06-19 - Move C/R -> kbdint special case to after the defaults have beenColin Watson
loaded, which makes ChallengeResponse default to yes again. This was broken by the Match changes and not fixed properly subsequently (closes: #428968).
2007-06-18* Backport from upstream:Colin Watson
- Silence spurious error messages from hang-on-exit fix (http://bugzilla.mindrot.org/show_bug.cgi?id=1306, closes: #429531).
2007-06-13don't worry about reload failures in if-up scriptColin Watson
2007-06-13* Add /etc/network/if-up.d/openssh-server to restart sshd when newColin Watson
interfaces appear (LP: #103436).
2007-06-13* Add try-restart action to init script.Colin Watson
2007-06-13* Document the SILENT loglevel in sftp-server(8), ssh_config(5), andColin Watson
sshd_config(5).
2007-06-13* Suppress "Connection to <host> closed" and "Connection to master closed"Colin Watson
messages at loglevel SILENT (thanks, Jaap Eldering; closes: #409788). * Suppress "Pseudo-terminal will not be allocated because stdin is not a terminal" message at loglevels QUIET and SILENT (closes: #366814).
2007-06-13* Clarify that 'ssh -q -q' still prints errors caused by bad argumentsColin Watson
(i.e. before the logging system is initialised).
2007-06-13* Fix ordering of SYSLOG_LEVEL_QUIET and SYSLOG_LEVEL_FATAL.Colin Watson
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-13 14:32:43 +0000