Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-12-07 | Update "Subsystem sftp" path in example sshd_config (closes: #691004). | Colin Watson | |
2015-12-06 | Add an openssh-client-ssh1 binary package for people who need to connect to ↵ | Colin Watson | |
outdated SSH1-only servers (closes: #807107). | |||
2015-12-05 | Add NEWS.Debian documenting cryptographic changes in OpenSSH 7.0 (closes: ↵ | Colin Watson | |
#806962). | |||
2015-12-03 | Drop SSH1 keepalive patch. Now that SSH1 is disabled at compile-time, it's ↵ | Colin Watson | |
been rejected upstream and there isn't much point carrying it any more. | |||
2015-12-03 | Really enable conch interoperability tests under autopkgtest. | Colin Watson | |
2015-12-02 | releasing package openssh version 1:7.1p1-1 | Colin Watson | |
2015-12-02 | Enable conch interoperability tests under autopkgtest. | Colin Watson | |
2015-11-29 | New upstream release (7.1p1). | Colin Watson | |
2015-11-29 | Change "PermitRootLogin without-password" to the new preferred spelling of ↵ | Colin Watson | |
"PermitRootLogin prohibit-password" in sshd_config, and update documentation to reflect the new upstream default. | |||
2015-11-29 | New upstream release (7.0p1). | Colin Watson | |
2015-11-24 | releasing package openssh version 1:6.9p1-3 | Colin Watson | |
2015-11-24 | Drop ConsoleKit session registration patch; it was only ever enabled for ↵ | Colin Watson | |
Ubuntu, which no longer needs it (LP: #1334916, #1502045). | |||
2015-11-24 | Do much less work in architecture-independent-only builds. | Colin Watson | |
2015-11-24 | Fix dh_install and dh_fixperms overrides to work properly with an ↵ | Colin Watson | |
architecture-independent-only build (closes: #806090). | |||
2015-09-17 | ssh_config(5): Fix markup errors in description of GSSAPITrustDns (closes: ↵ | Colin Watson | |
#799271). | |||
2015-09-10 | releasing package openssh version 1:6.9p1-2 | Colin Watson | |
2015-09-10 | Build with audit support on Linux (closes: #797727, LP: #1478087). | Tyler Hicks | |
2015-09-08 | mention-ssh-keygen-on-keychange.patch: Move example ssh-keygen invocation ↵ | Colin Watson | |
onto a separate line to make it easier to copy and paste (LP: #1491532). | |||
2015-08-20 | releasing package openssh version 1:6.9p1-1 | Colin Watson | |
2015-08-20 | Let principals-command.sh work for noexec /var/run. | Colin Watson | |
2015-08-20 | Fix autopkgtests to build some more regression test binaries. | Colin Watson | |
2015-08-19 | Document the Debian-specific change to the default value of ↵ | Colin Watson | |
ForwardX11Trusted in ssh(1) (closes: #781469). | |||
2015-08-19 | Add a couple of SECURITY: tags. | Colin Watson | |
2015-08-19 | CVE-2015-5600: sshd(8): Fix circumvention of MaxAuthTries using ↵ | Colin Watson | |
keyboard-interactive authentication (closes: #793616). | |||
2015-08-19 | Backport PAM security fixes. | Colin Watson | |
- sshd(8): Fixed a privilege separation weakness related to PAM support. Attackers who could successfully compromise the pre-authentication process for remote code execution and who had valid credentials on the host could impersonate other users. Reported by Moritz Jodeit. - sshd(8): Fixed a use-after-free bug related to PAM support that was reachable by attackers who could compromise the pre-authentication process for remote code execution (closes: #795711). Also reported by Moritz Jodeit. | |||
2015-08-19 | Fill in CVE-2015-5352 identifier and close #790798. | Colin Watson | |
2015-08-19 | SECURITY: sshd(8): OpenSSH 6.8 and 6.9 incorrectly set TTYs to be ↵ | Colin Watson | |
world-writable. Local attackers may be able to write arbitrary messages to logged-in users, including terminal escape sequences. Reported by Nikolay Edigaryev. | |||
2015-08-19 | New upstream release (6.9p1). | Colin Watson | |
2015-08-19 | Thanks to Jakub Jelen of Red Hat for Fedora's rebased version of the GSSAPI ↵ | Colin Watson | |
key exchange patch. | |||
2015-08-19 | Fix incorrect version in most recent debian/NEWS entry. | Colin Watson | |
2015-08-19 | New upstream release (6.8p1). | Colin Watson | |
2015-07-20 | Add generated file debian/copyright | Colin Watson | |
This is friendlier to tools such as dgit that want the packaging git tree to look like the output of "dpkg-source -x". | |||
2015-04-19 | releasing package openssh version 1:6.7p1-6 | Colin Watson | |
2015-04-19 | Silence confusing messages if Upstart is installed but not active | Martin Pitt | |
* openssh-server.postinst: Quiesce "Unable to connect to Upstart" error message from initctl if upstart is installed, but not the current init system. (LP: #1440070) * openssh-server.postinst: Fix version comparisons of upgrade adjustments to not apply to fresh installs. | |||
2015-03-22 | releasing package openssh version 1:6.7p1-5 | Colin Watson | |
2015-03-22 | Add a NEWS.Debian entry documenting this reversion, as it is too difficult ↵ | Colin Watson | |
to undo the sshd_config change automatically without compounding the problem of (arguably) overwriting user configuration. | |||
2015-03-22 | Revert LC_* configuration change (closes: #780797). | Colin Watson | |
2015-03-18 | releasing package openssh version 1:6.7p1-4 | Colin Watson | |
2014-12-03 | Brazilian Portuguese (thanks, José de Figueiredo; closes: #771859). | Colin Watson | |
2014-11-07 | Document interactions between ListenAddress/Port and ssh.socket in ↵ | Colin Watson | |
README.Debian (closes: #764842). | |||
2014-11-06 | Send/accept only specific known LC_* variables, rather than using a wildcard ↵ | Colin Watson | |
(closes: #765633). | |||
2014-11-03 | releasing package openssh version 1:6.7p1-3 | Colin Watson | |
2014-11-03 | Assume that dpkg-statoverride exists and drop the test for an obsolete ↵ | Colin Watson | |
compatibility path. | |||
2014-10-19 | Dutch (thanks, Frans Spiesschaert; closes: #765851). | Colin Watson | |
2014-10-10 | releasing package openssh version 1:6.7p1-2 | Colin Watson | |
2014-10-10 | debian/tests/control: Drop isolation-container. | Colin Watson | |
The tests run on a high port. They're still not guaranteed to run correctly in an schroot, but may manage to work, so this lets the tests at least try to run on ci.debian.net. | |||
2014-10-10 | changelog typo | Colin Watson | |
2014-10-09 | releasing package openssh version 1:6.7p1-1 | Colin Watson | |
2014-10-09 | Disable PuTTY and conch interop tests for now. Basic interop seems OK; ↵ | Colin Watson | |
(some) test fixes in progress. | |||
2014-10-08 | Run a subset of the upstream regression test suite at package build time, ↵ | Colin Watson | |
and the rest of it under autopkgtest. |