| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2010-02-22 | run dh_installexamples after dh_link | Colin Watson | |
| 2010-01-31 | Honour DEB_BUILD_OPTIONS=nocheck. | Colin Watson | |
| 2010-01-31 | Use dh_lintian. | Colin Watson | |
| 2010-01-31 | Install upstream sshd_config as an example (closes: #415008). | Colin Watson | |
| 2010-01-31 | fix typo in 1:5.3p1-1 changelog | Colin Watson | |
| 2010-01-31 | Link with -Wl,--as-needed (closes: #560155). | Colin Watson | |
| 2010-01-26 | releasing version 1:5.3p1-1 | Colin Watson | |
| 2010-01-25 | Drop change from 1:3.8p1-3 to avoid setresuid() and setresgid() system | Colin Watson | |
| calls. This only applied to Linux 2.2, which it's no longer feasible to run anyway (see 1:5.2p1-2 changelog). | |||
| 2010-01-25 | * Backport from upstream: | Colin Watson | |
| - Do not fall back to adding keys without contraints (ssh-add -c / -t ...) when the agent refuses the constrained add request. This was a useful migration measure back in 2002 when constraints were new, but just adds risk now (LP: #209447). | |||
| 2010-01-24 | * New upstream release. | Colin Watson | |
| * Update to GSSAPI patch from http://www.sxw.org.uk/computing/patches/openssh-5.3p1-gsskex-all-20100124.patch. | |||
| 2010-01-24 | fix gssapi merge instructions | Colin Watson | |
| 2010-01-24 | describe handling of gssapi branch | Colin Watson | |
| 2010-01-16 | releasing version 1:5.2p1-2 | Colin Watson | |
| 2010-01-16 | Output a debug if we can't open an existing keyfile (LP: #505301). | Colin Watson | |
| 2010-01-16 | Implement DebianBanner server configuration flag that can be set to "no" | Colin Watson | |
| to allow sshd to run without the Debian-specific extra version in the initial protocol handshake (closes: #562048). | |||
| 2010-01-15 | spacing | Colin Watson | |
| 2010-01-15 | Drop change from 1:3.6.1p2-5 to disable cmsg_type check for file | Colin Watson | |
| descriptor passing when running on Linux 2.0. The previous stable release of Debian dropped support for Linux 2.4, let alone 2.0, so this very likely has no remaining users depending on it. | |||
| 2010-01-12 | Don't run tests when cross-compiling. | Colin Watson | |
| 2010-01-12 | Use host compiler for ssh-askpass-gnome when cross-compiling. | Colin Watson | |
| 2010-01-10 | * Backport from upstream: | Colin Watson | |
| - After sshd receives a SIGHUP, ignore subsequent HUPs while sshd re-execs itself. Prevents two HUPs in quick succession from resulting in sshd dying (LP: #497781). | |||
| 2010-01-04 | releasing version 1:5.2p1-1 | Colin Watson | |
| 2010-01-04 | LP bug closure too | Colin Watson | |
| 2010-01-04 | reasoning | Colin Watson | |
| 2010-01-04 | Include URL to OpenBSD's ssl(8) in ssh(1) (closes: #530692). | Colin Watson | |
| 2010-01-04 | Refer to sshd_config(5) rather than sshd(8) in postinst-written | Colin Watson | |
| /etc/ssh/sshd_config, and add UsePAM commentary from upstream-shipped configuration file (closes: #415008, although unfortunately this will only be conveniently visible on new installations). | |||
| 2010-01-04 | Remove/adjust manual page references to BSD-specific /etc/rc (closes: | Colin Watson | |
| #513417). | |||
| 2010-01-04 | Remove manual page references to login.conf, which aren't applicable on | Colin Watson | |
| non-BSD systems (closes: #154434). | |||
| 2010-01-04 | Adjust short descriptions to avoid relying on previous experience with | Colin Watson | |
| rsh, based on suggestions from Reuben Thomas (closes: #512198). | |||
| 2010-01-02 | Remove init script stop link in rc1, as killprocs handles it already. | Colin Watson | |
| 2010-01-02 | Cope with insserv reordering of init script links. | Colin Watson | |
| 2010-01-02 | Remove ssh/new_config, only needed for direct upgrades from potato which | Colin Watson | |
| are no longer particularly feasible anyway (closes: #420682). | |||
| 2010-01-02 | Update OpenSSH FAQ to revision 1.110. | Colin Watson | |
| 2010-01-02 | yet another report of this | Colin Watson | |
| 2010-01-02 | Use hardening-includes for hardening logic (thanks, Kees Cook; closes: | Colin Watson | |
| #561887). | |||
| 2010-01-02 | Don't duplicate backslashes when displaying server banner (thanks, | Colin Watson | |
| Michał Górny; closes: #505378, LP: #425346). | |||
| 2010-01-02 | Initialise sc to NULL in ssh_selinux_getctxbyname (thanks, Václav Ovsík; | Colin Watson | |
| closes: #498684). | |||
| 2010-01-02 | Make ChrootDirectory work with SELinux (thanks, Russell Coker; closes: | Colin Watson | |
| #556644). | |||
| 2010-01-02 | more bug fix notes | Colin Watson | |
| 2010-01-01 | * New upstream release (closes: #536182). Yes, I know 5.3p1 has been out | Colin Watson | |
| for a while, but there's no GSSAPI patch available for it yet. - Change the default cipher order to prefer the AES CTR modes and the revised "arcfour256" mode to CBC mode ciphers that are susceptible to CPNI-957037 "Plaintext Recovery Attack Against SSH". - Add countermeasures to mitigate CPNI-957037-style attacks against the SSH protocol's use of CBC-mode ciphers. Upon detection of an invalid packet length or Message Authentication Code, ssh/sshd will continue reading up to the maximum supported packet length rather than immediately terminating the connection. This eliminates most of the known differences in behaviour that leaked information about the plaintext of injected data which formed the basis of this attack (closes: #506115, LP: #379329). - ForceCommand directive now accepts commandline arguments for the internal-sftp server (closes: #524423, LP: #362511). - Add AllowAgentForwarding to available Match keywords list (closes: #540623). - Make ssh(1) send the correct channel number for SSH2_MSG_CHANNEL_SUCCESS and SSH2_MSG_CHANNEL_FAILURE messages to avoid triggering 'Non-public channel' error messages on sshd(8) in openssh-5.1. - Avoid printing 'Non-public channel' warnings in sshd(8), since the ssh(1) has sent incorrect channel numbers since ~2004 (this reverts a behaviour introduced in openssh-5.1; closes: #496017). * Update to GSSAPI patch from http://www.sxw.org.uk/computing/patches/openssh-5.2p1-gsskex-all-20090726.patch, including cascading credentials support (LP: #416958). | |||
| 2010-01-01 | TODO for gssapi branch handling | Colin Watson | |
| 2009-12-21 | pushed some previous upstream release branches to Launchpad | Colin Watson | |
| 2009-12-21 | Add debian/README.source with instructions on bzr handling. | Colin Watson | |
| 2009-12-21 | move local ignores to .bzrignore and resync .cvsignore files with upstream | Colin Watson | |
| 2009-12-21 | Moved to bzr.debian.org; add Vcs-Bzr and Vcs-Browser control fields. | Colin Watson | |
| 2009-11-12 | Use x11.pc when compiling/linking gnome-ssh-askpass2 (closes: #555951). | Colin Watson | |
| 2009-10-05 | releasing version 1:5.1p1-8 | Colin Watson | |
| 2009-10-04 | Pass $SSHD_OPTS when checking configuration too (thanks, "sobtwmxt"; | Colin Watson | |
| closes: #548662). | |||
| 2009-09-30 | Fix grammar in if-up script (closes: #549128). | Colin Watson | |
| 2009-09-17 | Build-depend on libselinux1-dev on sh4 too (thanks, Nobuhiro Iwamatsu; | Colin Watson | |
| closes: #547103). | |||
| 2009-08-28 | Build with just -fPIC on mips/mipsel, not -fPIE as well (thanks, LIU Qi; | Colin Watson | |
| closes: #538313). | |||
 |
index : openssh.git | |
| summaryrefslogtreecommitdiff |